PT-2025-51299 · Ruijie · Reyeeos

Riyan Firmansyah · Published 2025-12-15 · Updated 2025-12-21 · CVE-2023-53881

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ReyeeOS version 1.204.1614

Description ReyeeOS version 1.204.1614 contains an unencrypted CWMP communication issue that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by exploiting unprotected HTTP polling requests. The vulnerability enables trivial man-in-the-middle attacks for remote code execution. The communication occurs via unencrypted channels, allowing interception of data transmitted between the device and the CWMP server.

Recommendations ReyeeOS version 1.204.1614 should be updated to a newer version that contains a fix for this vulnerability.

Exploit

Fix

RCE

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2023-53881

Affected Products

Reyeeos

References · 9

• 🔥 https://exploit-db.com/exploits/51642 · Exploit
• https://osv.dev/vulnerability/CVE-2023-53881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53881 · Security Note
• https://twitter.com/VulmonFeeds/status/2000743227205275953 · Twitter Post
• https://vulncheck.com/advisories/reyeeos-man-in-the-middle-remote-code-execution-via-cwmp · Note
• https://ruijienetworks.com · Note
• https://twitter.com/0dayPublishing/status/2000667332121657466 · Twitter Post
• https://t.me/cveNotify/146267 · Telegram Post
• https://twitter.com/CVEnew/status/2002857370100326671 · Twitter Post