PT-2024-9571 · Ruijie · Ruijie Reyee Os

Published 2024-12-03 · Updated 2024-12-10 · CVE-2024-47791

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ruijie Reyee OS versions 2.206.x through 2.320.x

Description The issue is related to the Ruijie MQTT broker in Ruijie Reyee OS, where an attacker could subscribe to partial possible topics and receive partial messages being sent to and from devices. This is due to the lack of measures to neutralize wildcard or matching symbols. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.

Recommendations For Ruijie Reyee OS versions 2.206.x through 2.320.x, consider disabling the MQTT broker functionality until a patch is available to prevent potential exploitation. Restrict access to the MQTT broker to minimize the risk of unauthorized access. Avoid using wildcard or matching symbols in topic subscriptions to reduce the vulnerability to partial message interception. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Neutralization of Wildcards

Weakness Enumeration

CWE-155

Related Identifiers

BDU:2024-11278

CVE-2024-47791

Affected Products

Ruijie Reyee Os

References · 9

• https://bdu.fstec.ru/vul/2024-11278 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47791 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47791 · Vendor Advisory
• https://vuldb.com/?id.286848 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-338-01 · Note
• https://twitter.com/CveFindCom/status/1865101912430809341 · Twitter Post
• https://t.me/cvenotify/103773 · Telegram Post
• https://twitter.com/CVEnew/status/1865105630878408758 · Twitter Post
• https://t.me/cvedetector/12275 · Telegram Post