Rg Es210Gc Lp
Monthly
Unauthenticated denial of service against Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P Ethernet switches running firmware ESW_1.0(1)B1P48: anyone who can reach the Local Firmware Upgrade web interface can drive a buffer overflow through the httpupg.cgi endpoint and crash the device. The confirmed impact is availability only (VC:N/VI:N/VA:H) - reboot, lockup or loss of management access - with no demonstrated code execution or data compromise despite the CWE-120 overflow class. No vendor fix has been published (Ruijie did not respond to the disclosure), and a public PoC reference exists but is not verified as working exploit code, so priority is set to this_week rather than emergency.
Cross-site scripting in the Cloud Management web interface of Ruijie RG-ES series switches (RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P running firmware ESW_1.0(1)B1P48) lets an administrator who already holds high-privilege access inject script through the 'url' argument of set_cloud_serverUrl.cgi, with the payload running in a victim's browser only after that victim interacts with the resulting page. Scoring reflects that constraint: CVSS 4.0 rates it 1.9 with PR:H and UI:P, and the independent assessment lands on CVSS 3.1 AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N, meaning the realistic ceiling is limited integrity impact on page content rather than credential theft or device takeover. A public PoC reference exists in a GitHub repository, but it is not verified as working exploit code; there is no KEV listing and the current decision label is monitor.
Unauthenticated denial of service against Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P Ethernet switches running firmware ESW_1.0(1)B1P48: anyone who can reach the Local Firmware Upgrade web interface can drive a buffer overflow through the httpupg.cgi endpoint and crash the device. The confirmed impact is availability only (VC:N/VI:N/VA:H) - reboot, lockup or loss of management access - with no demonstrated code execution or data compromise despite the CWE-120 overflow class. No vendor fix has been published (Ruijie did not respond to the disclosure), and a public PoC reference exists but is not verified as working exploit code, so priority is set to this_week rather than emergency.
Cross-site scripting in the Cloud Management web interface of Ruijie RG-ES series switches (RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P running firmware ESW_1.0(1)B1P48) lets an administrator who already holds high-privilege access inject script through the 'url' argument of set_cloud_serverUrl.cgi, with the payload running in a victim's browser only after that victim interacts with the resulting page. Scoring reflects that constraint: CVSS 4.0 rates it 1.9 with PR:H and UI:P, and the independent assessment lands on CVSS 3.1 AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N, meaning the realistic ceiling is limited integrity impact on page content rather than credential theft or device takeover. A public PoC reference exists in a GitHub repository, but it is not verified as working exploit code; there is no KEV listing and the current decision label is monitor.