Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks
Briefly

Cybersecurity researchers from Claroty discovered significant security flaws in Ruijie Networks' cloud management platform, allowing attackers potential control over tens of thousands of devices. The research outlined an attack method named 'Open Sesame' for unauthorized access.
Of the 10 vulnerabilities identified, three were rated as Critical in intensity. The most severe, CVE-2024-48874, has a CVSS score of 9.8 due to a server-side request forgery that jeopardizes Ruijie's internal cloud services.
Read at The Hacker News
[
|
]