CVE-2024-42494: fallo de gravedad alta en Ruijie Reyee OS
Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.4%
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Ruijie · Reyee OSCVEs relacionadas — Ruijie Reyee OS
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-52324CRITICALRuijie Reyee OS Use of Inherently Dangerous FunctionEPSS 0.7%CVE-2024-47547CRITICALRuijie Reyee OS Weak Password Recovery Mechanism for Forgotten PasswordEPSS 0.7%CVE-2024-48874CRITICALRuijie Reyee OS Server-Side Request ForgeryEPSS 0.6%CVE-2024-51727HIGHRuijie Reyee OS Premature Release of Resource During Expected LifetimeEPSS 0.5%CVE-2024-45722HIGHRuijie Reyee OS Use of Weak CredentialsEPSS 0.5%CVE-2024-46874CRITICALRuijie Reyee OS Improper Handling of Insufficient Permissions or PrivilegesEPSS 0.4%