Critical · published September 3, 2025
🚨 An HTTP POST request is all it takes to bypass authentication on Ruijie RG-ES series switches! This vulnerability gives attackers unrestricted access to change admin settings — it’s like giving someone the keys to your office without realizing it! 🔥 Think of it like a hotel where anyone can check into any room just by declaring their name at the front desk — no ID needed! The switch is trusting the wrong guest entirely, allowing them to mess with the main controls without any verification. With this vulnerability, a remote attacker could waltz in and take over the device completely, altering critical settings and gaining control. This could lead to devastating consequences like service disruptions or unauthorized network access, putting sensitive data at risk.
Think of it like a hotel where anyone can check into any room just by declaring their name at the front desk — no ID needed! The switch is trusting the wrong guest entirely, allowing them to mess with the main controls without any verification. This vulnerability in the Ruijie RG-ES firmware allows attackers to send a crafted HTTP POST request to the /user.cgi endpoint, bypassing all authentication checks and granting full access to admin functions.
With this vulnerability, a remote attacker could waltz in and take over the device completely, altering critical settings and gaining control. This could lead to devastating consequences like service disruptions or unauthorized network access, putting sensitive data at risk. Update the firmware to a secure version immediately as soon as it’s available. Additionally, restrict access to the management interface to trusted IP addresses only, and regularly audit devices for unauthorized changes. You've got this! Follow the steps to protect your network and keep those switches secure! 🛡️