Ruijie RG-NBR2600S Gateway Buffer Overflow Vulnerability Allowing Denial-of-Service and Arbitrary Command Execution

A buffer overflow vulnerability has been identified in the Ruijie RG-NBR2600S Gateway, specifically in version 10.3(4b12). The vulnerability arises from inadequate length verification related to the configuration of source address NAT rules. Attackers who successfully exploit this issue can cause the device to crash or execute arbitrary commands.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the device to crash, and allows for arbitrary command execution on the affected device.