Search/CVE-2024-28288
● CVE — Critical

CVE-2024-28288

VendorruijieProductrg-nbr700gw firmwareDiscoveredMar 30, 2024UpdatedJun 30, 2025

Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise.

CVSS v3.1
9.8 CRITICAL
EPSS
0.72%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Mar 30, 2024
Disclosure — published as a CVE record. · last revised by NVD Jun 30, 2025