Threats tagged 'ghsa-cr29-wjp4-gr5r'

An information disclosure vulnerability in Ruijie NBR series routers (including NBR2000G, NBR1300G, and NBR1000) allows unauthenticated attackers to retrieve administrative credentials in plaintext via a crafted POST request to the /WEB_VMS/LEVEL15/ endpoint. The flaw arises from improper authentication checks and insecure backend logic.