← Vulnerability feed

Vulnerability record · CVE-2024-24116 · published 2 October 2024

CVE-2024-24116: Ruijie rg-nbs2009g-p firmware vulnerability

Ruijie · Rg Nbs2009g P Firmware

An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.

9.8 CVSS 3.1 Critical EPSS 28% · top 1.9% CWE-280 · CWE-280
9.8CVSS 3.1 base score
28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://gist.github.com/zty-1995/7a5e3ad0eb3b6c44db1a6eb4092893d3 Third Party Advisory
https://github.com/zty-1995/RG-NBS2009G-P-switch/tree/main/Unauthorized%20Access%20Vulnerability ExploitThird Party Advisory

Track CVE-2024-24116 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-24117Ruijie rg-nbs2009g-p firmware incorrect permission assignment vulnerabilityInsecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login …EPSS 0.66%8.8CVE-2023-38902Ruijie rg-ew1200 firmware command injection vulnerabilityA command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B…EPSS 2.6%7.3CVE-2024-2642Ruijie rg-nbs2009g-p firmware command injection vulnerabilityA vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown func…EPSS 2.8%5.3CVE-2024-2641Ruijie rg-nbs2009g-p firmware improper authorization vulnerabilityA vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been classified as critical. Affected is an unknown function of the file /sy…EPSS 0.79%

Source: NIST National Vulnerability Database (record CVE-2024-24116), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.