CVE-2024-42936

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message...

CVE-2024-42936

The CVE-2024-42936 entry concerns the Ruijie RG-EW300N router’s mqlink.elf service. A Remote Code Execution vulnerability exists in ReyeeOS 1.300.1422 triggered by a crafted/modified MQTT broker message. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8 (CRITICAL). Impact ...