CVE-2024-42494: Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor
6.5
CVSS
Description
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services
Classification
CVE ID: CVE-2024-42494
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: Ruijie
Product: Reyee OS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 39.17% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)