CVE-2024-28288: Critical severity ruijie rg-nbr700gw vulnerability
Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28288?
CVE-2024-28288 is classified as a critical security vulnerability due to the potential for unauthorized access to sensitive administrative functions of the Ruijie RG-NBR700GW router.
How do I fix CVE-2024-28288?
To fix CVE-2024-28288, ensure that the router's firmware is updated to the latest version provided by Ruijie, which includes security patches addressing this vulnerability.
What type of vulnerability is CVE-2024-28288?
CVE-2024-28288 is an administrator password reset vulnerability stemming from a lack of cookie verification in the Ruijie RG-NBR700GW router.
Who is affected by CVE-2024-28288?
CVE-2024-28288 affects users of the Ruijie RG-NBR700GW router running firmware version 10.3(4b12) who have not applied the necessary patches.
What can an attacker do with CVE-2024-28288?
An attacker exploiting CVE-2024-28288 can reset the administrator password and gain unauthorized access to the router, potentially disrupting enterprise operations.