CVE-2024-47791CWE-155

Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols

High · published December 6, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-155 · Improper Neutralization of Wildcards or Matching Symbols
Published
2024-12-06T18:16Z
EPSS history
Timeline
  • 06 DEC 18:16Z
    Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols
    cvelistv5