CVE-2023-4415
HighCVSS 7.3Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A critical vulnerability was found in the Ruijie RG-EW1200G 07161417 r483, affecting some unknown functionality of the file /api/sys/login. Manipulation of this file leads to improper authentication.
Risk Assessment
This vulnerability allows for remote attacks, posing a serious threat to the organization's security. The public disclosure of the exploit increases the risk of this vulnerability being exploited.
Recommendation
It is recommended to immediately update the device to the latest firmware version to mitigate this vulnerability. Additionally, monitor system logs for potential attack attempts.
Original NVD description (English source)
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.