Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-53881. PoCs published by Riyan Firmansyah of Seclab.
AI-analyzed exploit summary This exploit demonstrates a Man-in-The-Middle (MiTM) attack against Ruijie ReyeeOS devices by impersonating a CWMP server to execute arbitrary commands via OS command injection in diagnostic tools. It sets up a fake HTTP server to intercept and respond to CWMP requests, enabling remote code execution.
Description
ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by exploiting the unprotected HTTP polling requests.
Exploits (1)
This exploit demonstrates a Man-in-The-Middle (MiTM) attack against Ruijie ReyeeOS devices by impersonating a CWMP server to execute arbitrary commands via OS command injection in diagnostic tools. It sets up a fake HTTP server to intercept and respond to CWMP requests, enabling remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H