CVE-2024-24117

State: Published
Severity: 9.8 Critical
Published: Oct 2, 2024
Updated: Mar 13, 2025
Reserved: Jan 25, 2024

Description

Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login check state component.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Any%20user%20login%20exists
https://gist.github.com/zty-1995/dbb3d5b2dbf65b4de5b71e57d08139ea

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.