Remote Privilege Escalation in Ruijie RG-NBS2009G-P Switch
CVE-2024-24116
9.8CRITICAL
Summary
The Ruijie RG-NBS2009G-P switch running RGOS version 10.4(1)P2 is susceptible to an unauthorized access vulnerability that facilitates remote attackers in escalating privileges. By exploiting a flaw found in the system/config_menu.htm component, an attacker can gain elevated access, potentially leading to further compromise of the network device. This vulnerability underscores the critical importance of securing network infrastructure and ensuring that devices are patched against known security flaws.
References
EPSS Score
66% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved