CVE-2024-47043

Summary

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address.

Affected Software

VendorProductVersion RangeStatus
RuijieReyee OS2.206.x < 2.320.xaffected

Weaknesses

  • CWE-922: CWE-922 Insecure Storage of Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References