ID

VAR-201508-0676


TITLE

Ruijie Networks RG-NBR Series Gateway Has Authorization Bypass Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2015-04797

DESCRIPTION

Ruijie Networks is the leading brand of network solutions in China. As a national enterprise, Ruijie Networks adheres to the path of independent research and development, and has opened up a unique avenue for innovation in the highly competitive network equipment market. Manufacturers represented by Ruijie Networks not only strive for lower network construction and network costs for Chinese users, but also effectively ensure network security and controllability. Ruijie Networks RG-NBR series gateway has an authorization bypass vulnerability. Allows attackers to exploit this vulnerability to read arbitrary files.

Trust: 0.6

sources: CNVD: CNVD-2015-04797

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2015-04797

AFFECTED PRODUCTS

vendor:ruijiemodel:networks nbr1500g rgos p1scope:eqversion:10.3

Trust: 0.6

vendor:ruijiemodel:networks nbr1500g rgos releasescope:eqversion:(172818)

Trust: 0.6

sources: CNVD: CNVD-2015-04797

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2015-04797
value: HIGH

Trust: 0.6

CNVD: CNVD-2015-04797
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2015-04797

PATCH

title:Ruijie Networks RG-NBR Series Gateway Has Authorization Bypass Vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/60200

Trust: 0.6

sources: CNVD: CNVD-2015-04797

EXTERNAL IDS

db:CNVDid:CNVD-2015-04797

Trust: 0.6

sources: CNVD: CNVD-2015-04797

SOURCES

db:CNVDid:CNVD-2015-04797

LAST UPDATE DATE

2022-05-04T09:29:59.377000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2015-04797date:2015-07-24T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2015-04797date:2015-08-12T00:00:00