CVE-2024-2641

Name of the Vulnerable Software and Affected Versions Ruijie RG-NBS2009G-P up to 20240305

Description A critical issue has been found in the Password Handler component of the Ruijie RG-NBS2009G-P, specifically in the /system/passwdManage.htm file. This issue leads to improper authorization and can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For Ruijie RG-NBS2009G-P up to 20240305, as a temporary workaround, consider restricting access to the /system/passwdManage.htm file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.