漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP
Vulnerability Description
ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by exploiting the unprotected HTTP polling requests.
CVSS Information
N/A
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
Ruijie ReyeeOS 安全漏洞
Vulnerability Description
Ruijie ReyeeOS是中国锐捷(Ruijie)公司的一个操作系统。 Ruijie ReyeeOS 1.204.1614版本存在安全漏洞,该漏洞源于CWMP通信未加密,可能导致拦截和操纵设备通信。
CVSS Information
N/A
Vulnerability Type
N/A