CVE-2026-120241
Full vulnerability record from the local CVENow database.
Description
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
HIGH
CVSS score
7.7
(v4.0)
Vulnerability status
Received
Source identifier
Published
2026-11-01 19:16:59.393000
Last modified
2026-11-01 19:16:59.393000
View original CVE JSON
{
"id": "CVE-2026-120241",
"sourceIdentifier": "[email protected]",
"published": "2026-11-01T19:16:59.393",
"lastModified": "2026-11-01T19:16:59.393",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Ruijie",
"product": "RG-ES205GC",
"cpes": [
"cpe:2.3:a:ruijie:rg-es205gc:*:*:*:*:*:*:*:*"
],
"modules": [
"Local Firmware Upgrade Interface"
],
"versions": [
{
"version": "ESW_1.0(1)B1P48",
"status": "affected"
}
]
},
{
"vendor": "Ruijie",
"product": "RG-ES206GC-P",
"cpes": [
"cpe:2.3:a:ruijie:rg-es206gc-p:*:*:*:*:*:*:*:*"
],
"modules": [
"Local Firmware Upgrade Interface"
],
"versions": [
{
"version": "ESW_1.0(1)B1P48",
"status": "affected"
}
]
},
{
"vendor": "Ruijie",
"product": "RG-ES208GC",
"cpes": [
"cpe:2.3:a:ruijie:rg-es208gc:*:*:*:*:*:*:*:*"
],
"modules": [
"Local Firmware Upgrade Interface"
],
"versions": [
{
"version": "ESW_1.0(1)B1P48",
"status": "affected"
}
]
},
{
"vendor": "Ruijie",
"product": "RG-ES210GC-LP",
"cpes": [
"cpe:2.3:a:ruijie:rg-es210gc-lp:*:*:*:*:*:*:*:*"
],
"modules": [
"Local Firmware Upgrade Interface"
],
"versions": [
{
"version": "ESW_1.0(1)B1P48",
"status": "affected"
}
]
},
{
"vendor": "Ruijie",
"product": "RG-ES210GS-P",
"cpes": [
"cpe:2.3:a:ruijie:rg-es210gs-p:*:*:*:*:*:*:*:*"
],
"modules": [
"Local Firmware Upgrade Interface"
],
"versions": [
{
"version": "ESW_1.0(1)B1P48",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"baseScore": 7.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-119"
},
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"references": [
{
"url": "https://github.com/byseeker/Ruijie-RG-ES-Series-Switches_PreAuth_Boundary_Overflow_DoS",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-120241",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/1016041",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/429600",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/429600/cti",
"source": "[email protected]"
}
]
}