CVE-2024-48874 — Ruijie Reyee OS Server-Side Request Forgery

CVE-2024-48874

Ruijie Reyee OS Server-Side Request Forgery PUBLISHED

Description (CNA)

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services.

Affected (CNA)

Vendor / product	Versions
Ruijie / Reyee OS	affected 2.206.x before 2.320.x

CWE

CWE-918

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.