CVE-2024-52324

9.2 criticalEPSS 0.7%

Critical (9.2) in ruijienetworks reyee os. EPSS 0.7% chance of exploitation in the next 30 days.

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.

Severity

CVSS 4.0

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-242
Published: 2024-12-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruijienetworks:reyee_os

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

Check your stack JSON