PT-2024-9574 · Ruijie · Ruijie Reyee Os

Published 2024-12-03 · Updated 2024-12-25 · CVE-2024-48874

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x

Description The issue allows attackers to force Ruijie's proxy servers to perform any request the attackers choose, potentially giving them access to internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services. This is related to insufficient request checking on the server side, which can be exploited for a Server-Side Request Forgery (SSRF) attack.

Recommendations For Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x, consider disabling the proxy server functionality until a patch is available to prevent attackers from manipulating proxy servers for unauthorized access. Restrict access to internal services and cloud infrastructure to minimize the risk of exploitation. As a temporary workaround, limit the use of AWS cloud metadata services to reduce the attack surface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2024-11281

CVE-2024-48874

Affected Products

Ruijie Reyee Os

References · 10

• https://osv.dev/vulnerability/CVE-2024-48874 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48874 · Security Note
• https://bdu.fstec.ru/vul/2024-11281 · Security Note
• https://twitter.com/gothburz/status/1872009266644877610 · Twitter Post
• https://twitter.com/CveFindCom/status/1865101858534031689 · Twitter Post
• https://t.me/cvedetector/12271 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-338-01 · Note
• https://vuldb.com/?id.286850 · Note
• https://twitter.com/CVEnew/status/1865105628617712006 · Twitter Post
• https://t.me/cvenotify/103774 · Telegram Post