Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5m6q-c52m-c8v4

Опубликовано: 29 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.4

Описание

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.

EPSS

Процентиль: 49%
0.00263
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.4
nvd
5 месяцев назад

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.

EPSS

Процентиль: 49%
0.00263
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-287