CVE-2024-24117

CRITICAL

Ruijie Rg-nbs2009g-p Firmware - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login check state component.

References (2)

Scores

CVSS v3 9.8
EPSS 0.0057
EPSS Percentile 68.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-732
Status published
Products (1)
ruijie/rg-nbs2009g-p_firmware 10.4\(1\)p2_release\(9736\)
Published Oct 02, 2024
Tracked Since Feb 18, 2026