CVE-2024-42494 — Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor

CVE-2024-42494

Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor PUBLISHED

Description (CNA)

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services

Affected (CNA)

Vendor / product	Versions
Ruijie / Reyee OS	affected 2.206.x before 2.320.x

CWE

CWE-359

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.