CVE-2024-42936

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message.
CVSS

No CVSS.

References
Link Resource
https://gist.github.com/smrx86/2008111b12ab47882b3928d0cbc9e415 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ruijie:reyee_os:1.300.1422:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300n:-:*:*:*:*:*:*:*

History

18 Jun 2025, 16:07

Type Values Removed Values Added
First Time Ruijie reyee Os
Ruijie rg-ew300n
Ruijie
CPE cpe:2.3:o:ruijie:reyee_os:1.300.1422:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300n:-:*:*:*:*:*:*:*
References () https://gist.github.com/smrx86/2008111b12ab47882b3928d0cbc9e415 - () https://gist.github.com/smrx86/2008111b12ab47882b3928d0cbc9e415 - Exploit, Third Party Advisory

21 Jan 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-21 20:15

Updated : 2025-06-18 16:07


NVD link : CVE-2024-42936

Mitre link : CVE-2024-42936


JSON object : View

Products Affected

ruijie

  • reyee_os
  • rg-ew300n
CWE

No CWE.