CVE-2024-42936

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message...

CVE-2024-42936

creationtimestamp| type| source ---|---|--- 2025-01-21 19:26:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113867985787969906 2025-01-21 20:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbo7sw4dn2j 2025-01-21 20:44:54+00:00| seen|...

CVE-2024-42936

The CVE-2024-42936 entry concerns the Ruijie RG-EW300N router’s mqlink.elf service. A Remote Code Execution vulnerability exists in ReyeeOS 1.300.1422 triggered by a crafted/modified MQTT broker message. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8 (CRITICAL). Impact ...

CVE-2024-42936

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message...