Ruijie Reyee Os vulnerabilities

CVE-2025-56084 [HIGH] CWE-78 CVE-2025-56084: OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

CVE-2025-56083 [HIGH] CWE-78 CVE-2025-56083: OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execu OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.

CVE-2024-46874 [CRITICAL] CWE-280 CVE-2024-46874: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud.

CVE-2025-56099 [HIGH] CWE-78 CVE-2025-56099: OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to ex OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVE-2025-56113 [HIGH] CWE-78 CVE-2025-56113: OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allow OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVE-2024-52324 [CRITICAL] CWE-242 CVE-2024-52324: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous functi Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.

CVE-2024-42936 [CRITICAL] CWE-94 CVE-2024-42936: The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerab The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message.

CVE-2024-48874 [CRITICAL] CWE-918 CVE-2024-48874: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services.

CVE-2024-47547 [CRITICAL] CWE-640 CVE-2024-47547: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its u Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vulnerable to brute force attacks.

CVE-2024-45722 [HIGH] CWE-1391 CVE-2024-45722: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an attacker to easily calculate MQTT credentials.

CVE-2024-42494 [HIGH] CWE-359 CVE-2024-42494: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could ena Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services

CVE-2024-51727 [HIGH] CWE-826 CVE-2024-51727: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enabl Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.

CVE-2024-47146 [MEDIUM] CWE-402 CVE-2024-47146: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain t Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal.

CVE-2024-47791 [MEDIUM] CWE-155 CVE-2024-47791: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscrib Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices.

CVE-2024-47043 [MEDIUM] CWE-922 CVE-2024-47043: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correla Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address.