CVE Vulnerabilities

CVE-2024-28288

Reliance on Cookies without Validation and Integrity Checking

Published: Mar 30, 2024 | Modified: Jun 30, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise.

Weakness

The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Affected Software

Name Vendor Start Version End Version
Rg-nbr700gw_firmware Ruijie 10.3(4b12) (including) 10.3(4b12) (including)

Potential Mitigations

References