First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-47146

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Ruijie	Reyee OS	>= 2.206.x, < 2.320.x

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01Third Party Advisory, US Government Resource

Timeline

Published: Dec 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471485.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-471495.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-47156.1A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects a CVE-2024-471505.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471517.8Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution CVE-2024-471535.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471545.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471555.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471565.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471575.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-471585.4N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed o CVE-2024-471594.3In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project

CVE-2024-47146: Medium severity, CVSS 6.5 | Vulnix