Remote Privilege Escalation in Ruijie RG-NBS2009G-P Switch
CVE-2024-24116

9.8CRITICAL

Key Information:

Vendor
Ruijie
Vendor
CVE Published:
2 October 2024

Summary

The Ruijie RG-NBS2009G-P switch running RGOS version 10.4(1)P2 is susceptible to an unauthorized access vulnerability that facilitates remote attackers in escalating privileges. By exploiting a flaw found in the system/config_menu.htm component, an attacker can gain elevated access, potentially leading to further compromise of the network device. This vulnerability underscores the critical importance of securing network infrastructure and ensuring that devices are patched against known security flaws.

References

EPSS Score

66% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.