CVE-2024-47146

Name of the Vulnerable Software and Affected Versions Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x

Description The issue allows an attacker to obtain the device's serial number if physically adjacent and sniffing the RAW WIFI signal. This is related to the disclosure of resources to untrusted parties, which can be exploited by an attacker to obtain the device's serial number by intercepting the Wi-Fi signal.

Recommendations For Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x, consider implementing additional security measures to prevent unauthorized access to the device's serial number, such as restricting access to the RAW WIFI signal or using encryption to protect the signal. At the moment, there is no information about a newer version that contains a fix for this vulnerability.