8.7
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Засегнати продукти
- Ruijie RG-ES205GC: ESW_1.0(1)B1P48
- Ruijie RG-ES206GC-P: ESW_1.0(1)B1P48
- Ruijie RG-ES208GC: ESW_1.0(1)B1P48
- Ruijie RG-ES210GC-LP: ESW_1.0(1)B1P48
- Ruijie RG-ES210GS-P: ESW_1.0(1)B1P48
Вид слабост
История
- 1 ноември 2026 Публикувано
Други уязвимости в Ruijie RG-ES205GC
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-120241
- https://nvd.nist.gov/vuln/detail/CVE-2026-120241
- https://vuldb.com/vuln/429600
- https://vuldb.com/vuln/429600/cti
- https://vuldb.com/cve/CVE-2026-120241
- https://vuldb.com/submit/1016041
- https://github.com/byseeker/Ruijie-RG-ES-Series-Switches_PreAuth_Boundary_Overflow_DoS