CVE-2024-42936

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-01-21

Last modified

2025-03-20

Weaknesses

CWE-94

Affected products

• Reyee Os (Ruijie)

References

• https://gist.github.com/smrx86/2008111b12ab47882b3928d0cbc9e415