CVE-2024-46874

Summary

CVE-2024-46874 is a vulnerability affecting Ruijie Reyee OS versions 2.206.x through 2.320.x. This issue permits MQTT clients, using valid device credentials, to transmit messages to specific topics. The consequence of this vulnerability is that attackers with device credentials can send commands to other connected devices, effectively impersonating Ruijie's cloud. This could potentially lead to unauthorized control or manipulation of devices in the network.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.