CVE-2024-47146 MEDIUM

CVE-2024-47146: Ruijie Reyee OS Resource Leak

Vendor Ruijie
Product Reyee OS
Weakness CWE-402
Published December 6, 2024
Last update December 6, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal.

Key dates

02Disclosure timeline

December 6, 2024 CVE published
December 6, 2024 Record updated