CVE-2024-51727

Description

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.

CVSS v3.1 Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-826 CWE-826

Affected Products

Vendor	Product	Versions
ruijienetworks	reyee_os	2.206.0 — 2.320.0

References

Other References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

Frequently Asked Questions

What is CVE-2024-51727? +

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account. It has a CVSS v3.1 base score of 6.5 (MEDIUM).

How severe is CVE-2024-51727? +

CVE-2024-51727 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-51727? +

CVE-2024-51727 affects products from ruijienetworks, specifically: reyee_os. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-51727? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-31115

XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder …

CVE-2026-53322 8.8

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, …

CVE-2025-24912 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the …

CVE-2024-58249 3.7

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.

CVE-2024-48874 9.8

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy …

CVE-2024-52324 9.8

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an …