Reyee Os

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ruijie:reyee_os:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRuijie (96eac408-82a5-5bcd-bf63-b3afa2c2d83f)
ProductReyee Os (c194c820-1e40-58c7-a005-d65d4a38cb83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52324 vulnerable 2026-06-08 06:52:14.811316 Ruijie Reyee OS Use of Inherently Dangerous Function
CRITICAL (9.8)
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.
Published: 2024-12-06T18:25:06.031Z
Updated: 2024-12-06T20:24:31.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51727 vulnerable 2026-06-08 06:52:12.715354 Ruijie Reyee OS Premature Release of Resource During Expected Lifetime
MEDIUM (6.5)
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.
Published: 2024-12-06T18:10:06.232Z
Updated: 2024-12-06T20:25:37.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48874 vulnerable 2026-06-08 06:50:11.207052 Ruijie Reyee OS Server-Side Request Forgery
CRITICAL (9.8)
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services.
Published: 2024-12-06T18:22:15.725Z
Updated: 2024-12-06T20:39:47.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47791 vulnerable 2026-06-08 06:48:13.167373 Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols
HIGH (7.5)
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices.
Published: 2024-12-06T18:16:07.652Z
Updated: 2024-12-06T20:40:14.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47547 vulnerable 2026-06-08 06:48:12.549566 Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password
CRITICAL (9.4)
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vulnerable to brute force attacks.
Published: 2024-12-06T18:00:24.657Z
Updated: 2024-12-06T20:41:43.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47146 vulnerable 2026-06-08 06:48:11.498457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47043 vulnerable 2026-06-08 06:48:11.175547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46874 vulnerable 2026-06-08 06:48:10.659392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45722 vulnerable 2026-06-08 06:48:08.956544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42494 vulnerable 2026-06-08 06:45:46.610734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.