High severity8.1NVD Advisory· Published Dec 15, 2025· Updated Jun 17, 2026
CVE-2023-53881
CVE-2023-53881
Description
ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by exploiting the unprotected HTTP polling requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:ruijienetworks:reyee_os:1.204.1614:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:ruijienetworks:reyee_os:1.204.1614:*:*:*:*:*:*:*
- (no CPE)range: 1.204.1614
- (no CPE)range: 1.204.1614
- Range: 1.204.1614
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51642nvdExploit
- www.vulncheck.com/advisories/reyeeos-man-in-the-middle-remote-code-execution-via-cwmpnvdThird Party Advisory
- ruijienetworks.comnvdBroken LinkProduct
News mentions
0No linked articles in our index yet.