PatchSiren cyber security CVE debrief

CVE-2024-47146 Ruijie CVE debrief

A low-severity information disclosure vulnerability in Ruijie Reyee OS allows physically adjacent attackers to obtain device serial numbers by sniffing raw Wi-Fi signals. The vendor has deployed cloud-based fixes requiring no end-user action.

Vendor: Ruijie
Product: Reyee OS
CVSS: LOW 3.1
CISA KEV: Not listed in stored evidence
Original CVE published: 2024-12-03
Original CVE updated: 2024-12-10
Advisory published: 2024-12-03
Advisory updated: 2024-12-10

Who should care

Organizations deploying Ruijie Reyee OS wireless access points or routers in industrial, enterprise, or OT environments where device inventory information should remain confidential from nearby adversaries.

Technical summary

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x transmit device serial numbers in raw Wi-Fi signals that can be captured by attackers with physical proximity. The attack requires adjacent positioning and raw signal sniffing capability, with high attack complexity. Confidentiality impact is limited to low-information disclosure (serial number only). The vendor has implemented cloud-based fixes with no end-user action required. CVSS 3.1: 3.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Defensive priority

low

Recommended defensive actions

Verify Reyee OS devices are running version 2.320.x or later, or confirm cloud-based mitigation is active per vendor guidance
Monitor for unauthorized physical proximity to wireless infrastructure
Apply standard wireless security hardening: disable unnecessary SSID broadcasts, implement WPA3-Enterprise where supported, and segment IoT/OT wireless networks
Review CISA ICS recommended practices for industrial control system wireless deployments

Evidence notes

CISA CSAF advisory ICSA-24-338-01 (Update A) published 2024-12-03, modified 2024-12-10. CVSS 3.1 score 3.1 (LOW). Vendor reports cloud-based remediation deployed.

Sources and references

Verified primary and authoritative sources

CVE-2024-47146 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2024-47146

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2024-47146 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-47146

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-338-01.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/topics/industrial-control-systems

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ncas/tips/ST04-014

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.