CVE-2023-30308

Published: May 28, 2024Modified: Aug 13, 2025

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions which could lead to a denial of service.

Affected (7)

Products: Ruijie: Rg Eg210g P Firmware, Rg Eg105g V2 Firmware, Rg Nbr6210 E Firmware, Rg Nbr6215 E Firmware, Rg Nbr6120 E Firmware, Rg Nbr6205 E Firmware, Rg Eg105g Firmware

Ruijie

7 products

Rg Eg210g P Firmware

Rg Eg105g V2 Firmware

Rg Nbr6210 E Firmware

Rg Nbr6215 E Firmware

Rg Nbr6120 E Firmware

Rg Nbr6205 E Firmware

Rg Eg105g Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Eg210g P Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Eg210g P	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Eg105g V2 Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Eg105g V2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Nbr6210 E Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Nbr6210 E	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Nbr6215 E Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Nbr6215 E	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Nbr6120 E Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Nbr6120 E	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Nbr6205 E Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Nbr6205 E	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruijie Rg Eg105g Firmware	All versions

Running on/with	Platform Versions
Ruijie Rg Eg105g	All versions

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical DescriptionThird Party Advisory

Timeline

No history available yet.