Description
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ruijie | Reyee OS | 2.206.x – < 2.320.x | 2.320.x |
Advisories 1
- ICSA-24-338-01 Ruijie Reyee OS (Update A) CISA ICS & IT advisories · Dec 10, 2024