7.5
HighCVSS 3.1 · from VulDB
CVE-2026-120241
Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow
RG-ES205GC · Buffer overflow · CWE-120AffectedRG-ES205GC, RG-ES206GC-P, RG-ES208GC and 2 more
FixNo fix listed yet.
PublishedNov 1, 18:45 · VulDB
ScoredNov 1 · 7.5 · VulDB
Exploit code publicNone known · checked 23:18 UTC
ExploitedNone known · CISA KEV checked 23:19 UTC
What we know
No known exploitation. CISA KEV, checked 23:19 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 23:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
A successful attack can take the service down. CVSS impact.
Description
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
From VulDB
Affected and fixed versions
ProductAffectedFixed inRG-ES205GCESW_1.0(1)B1P48–RG-ES206GC-PESW_1.0(1)B1P48–RG-ES208GCESW_1.0(1)B1P48–RG-ES210GC-LPESW_1.0(1)B1P48–RG-ES210GS-PESW_1.0(1)B1P48–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known