CVE-2024-47043 | THREATINT

Description

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address.

Reserved 2024-11-20 | Published 2024-12-06 | Updated 2024-12-06 | Assigner icscert

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-922 Insecure Storage of Sensitive Information

Product status

Default status

unaffected

2.206.x before 2.320.x

affected

Credits

Tomer Goldschmidt and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA. finder

References

www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

cve.org (CVE-2024-47043)

nvd.nist.gov (CVE-2024-47043)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.