CVE-2024-52324

Ruijie Reyee OS Use of Inherently Dangerous Function PUBLISHED

Description (CNA)

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.

Affected (CNA)

Vendor / product	Versions
Ruijie / Reyee OS	affected 2.206.x before 2.320.x

CWE

CWE-242

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.