CVE-2024-52324: Ruijie Reyee OS Use of Inherently Dangerous Function
9.8
CVSS
Description
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.
Classification
CVE ID: CVE-2024-52324
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
Affected Products
Vendor: Ruijie
Product: Reyee OS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 40.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)