PT-2024-12228 · Ruijie · Ruijie Eg210G-P+3

Ke Xu + 5 · Published 2024-05-28 · Updated 2025-08-13 · CVE-2023-30308

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ruijie EG210G-P (affected versions not specified) Ruijie EG105G-V2 (affected versions not specified) Ruijie NBR (affected versions not specified) Ruijie EG105G (affected versions not specified)

Description An issue in the mentioned Ruijie routers allows attackers to hijack TCP sessions, potentially leading to a denial of service.

Recommendations For Ruijie EG210G-P, update to a version that addresses the TCP session hijacking issue. For Ruijie EG105G-V2, update to a version that addresses the TCP session hijacking issue. For Ruijie NBR, update to a version that addresses the TCP session hijacking issue. For Ruijie EG105G, update to a version that addresses the TCP session hijacking issue.

Exploit

Fix

DoS

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2023-30308

Affected Products

Ruijie Eg105G

Ruijie Eg105G-V2

Ruijie Eg210G-P

Ruijie Nbr

References · 4

• 🔥 https://ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-30308 · Security Note
• https://t.me/cveNotify/132046 · Telegram Post
• https://t.me/cvenotify/127985 · Telegram Post