CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/	Patch Vendor Advisory
https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001
https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/	Patch Vendor Advisory
https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:ruijie:rg-ew1200r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew1200r:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:ruijie:rg-ew300_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew300:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:ruijie:rg-ew3200gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew3200gx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:ruijie:rg-ew1200g_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew1200g:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:ruijie:rg-ew1800gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew1800gx:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:ruijie:rg-ew300r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew300r:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:ruijie:rg-ew1200_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-ew1200:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:ruijie:rg-eg3000xe_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg3000xe:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:ruijie:rg-eg105g_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg105g:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:ruijie:rg-eg305gh-p-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg305gh-p-e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:ruijie:rg-eg105g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg105g-p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:ruijie:rg-eg3230_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg3230:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:ruijie:rg-eg1000e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg1000e:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:ruijie:rg-eg105g-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg105g-e:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:ruijie:rg-eg105gw\(t\)_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg105gw\(t\):-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:ruijie:rg-eg105gw-x_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg105gw-x:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:ruijie:rg-eg2000ce_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg2000ce:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:ruijie:rg-eg2100-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg2100-p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:ruijie:rg-eg209gs_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg209gs:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:ruijie:rg-eg310gh-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg310gh-e:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:ruijie:rg-eg3000eu_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg3000eu:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:ruijie:rg-eg210g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg210g-p:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:ruijie:rg-eg3250_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg3250:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:ruijie:re-eg1000m_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:re-eg1000m:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:ruijie:rg-eg1000c_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-eg1000c:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3100-48gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3100-48gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-24sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-24sfp:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-8gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-8gt4xs:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs-p:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs-p:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp-p:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:ruijie:rg-rap1260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap1260:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2266_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2266:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:ruijie:rg-rap1261_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap1261:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND

cpe:2.3:o:ruijie:rg-rap73hd_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap73hd:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2200\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2200\(e\):-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6260\(h\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6260\(h\):-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND

cpe:2.3:o:ruijie:rg-rap1200\(p\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap1200\(p\):-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2260\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2260\(e\):-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6262\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6262\(g\):-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6262_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6262:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2260:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6202\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6202\(g\):-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND

cpe:2.3:o:ruijie:rg-rap1201_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap1201:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND

cpe:2.3:o:ruijie:rg-rap1200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap1200\(f\):-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2260\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2260\(f\):-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2200\(f\):-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6260\(g\):-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND

cpe:2.3:o:ruijie:rg-rap2260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap2260\(g\):-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND

cpe:2.3:o:ruijie:rg-rap6260\(h\)-d_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-rap6260\(h\)-d:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND

cpe:2.3:o:ruijie:rg-nbc256_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbc256:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND

cpe:2.3:o:ruijie:rg-nbc512_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-nbc512:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-24gt4sfp:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-24t4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-24t4sfp-p:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-8gt2sfp:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-8gt2sfp-p:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-8t2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-8t2sfp-p:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-24t4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-24t4sfp:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-24gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND

cpe:2.3:o:ruijie:rg-s1930-8t2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*

cpe:2.3:h:ruijie:rg-s1930-8t2sfp:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:07

Type	Values Removed	Values Added
References	~~() https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - Patch, Vendor Advisory~~	() https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - Patch, Vendor Advisory
References	~~() https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001 -~~	() https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001 -

14 May 2024, 13:15

Type	Values Removed	Values Added
References		() https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001 -

08 Aug 2023, 16:02

Type	Values Removed	Values Added
First Time		Ruijie rg-eg3250 Ruijie rg-nbs3100-24gt4sfp Firmware Ruijie rg-eg1000e Ruijie rg-rap1201 Ruijie rg-rap6262\(g\) Firmware Ruijie rg-eg105g-p Ruijie rg-rap6260\(h\)-d Firmware Ruijie rg-rap1260 Firmware Ruijie rg-rap2266 Firmware Ruijie rg-ew1200r Firmware Ruijie rg-eg305gh-p-e Ruijie rg-nbs3200-24gt4xs-p Firmware Ruijie rg-s1930-8gt2sfp-p Firmware Ruijie rg-eg210g-p Ruijie rg-nbc256 Firmware Ruijie rg-rap6262 Ruijie rg-nbs3200-8gt4xs Ruijie rg-eg105g-e Firmware Ruijie rg-ew1200r Ruijie rg-rap1201 Firmware Ruijie rg-nbs3200-48gt4xs-p Firmware Ruijie rg-ew1800gx Firmware Ruijie rg-nbs3100-48gt4sfp-p Ruijie rg-rap2260\(f\) Ruijie rg-ew1200g Ruijie rg-ew1200 Firmware Ruijie rg-rap73hd Ruijie rg-nbs3100-24gt4sfp-p Ruijie rg-rap1200\(p\) Firmware Ruijie rg-rap2200\(f\) Ruijie rg-nbs3100-8gt2sfp Firmware Ruijie rg-s1930-24t4sfp-p Firmware Ruijie rg-ew3200gx Firmware Ruijie rg-s1930-8t2sfp Ruijie re-eg1000m Firmware Ruijie rg-eg209gs Ruijie rg-eg3000xe Firmware Ruijie rg-s1930-8t2sfp Firmware Ruijie rg-rap2260 Firmware Ruijie rg-eg2100-p Ruijie rg-ew300 Firmware Ruijie rg-eg310gh-e Ruijie rg-rap2260 Ruijie rg-rap1261 Ruijie rg-ew3200gx Ruijie rg-eg105g Firmware Ruijie rg-nbs3200-24sfp Ruijie rg-rap2200\(e\) Firmware Ruijie rg-ew300r Firmware Ruijie rg-rap6260\(g\) Ruijie rg-s1930-8gt2sfp-p Ruijie rg-eg1000e Firmware Ruijie rg-nbs3200-24gt4xs Firmware Ruijie rg-eg3000xe Ruijie rg-eg1000c Firmware Ruijie rg-s1930-24gt4sfp-p Ruijie rg-eg209gs Firmware Ruijie rg-nbs3100-8gt2sfp Ruijie rg-rap6260\(h\) Ruijie rg-rap1200\(f\) Firmware Ruijie rg-rap2260\(g\) Firmware Ruijie rg-s1930-8t2sfp-p Ruijie rg-eg3000eu Firmware Ruijie rg-ew300r Ruijie rg-eg105gw\(t\) Ruijie rg-eg2000ce Firmware Ruijie rg-rap6260\(g\) Firmware Ruijie rg-eg105gw\(t\) Firmware Ruijie rg-ew300 Ruijie Ruijie rg-s1930-24t4sfp-p Ruijie rg-rap73hd Firmware Ruijie rg-nbs3100-48gt4sfp-p Firmware Ruijie rg-nbs3100-24gt4sfp Ruijie rg-rap1260 Ruijie rg-rap6262\(g\) Ruijie rg-ew1800gx Ruijie rg-nbs3200-48gt4xs-p Ruijie rg-rap6202\(g\) Ruijie rg-nbs3200-24gt4xs-p Ruijie rg-eg210g-p Firmware Ruijie rg-eg105g Ruijie rg-rap6262 Firmware Ruijie rg-s1930-24gt4sfp Ruijie rg-s1930-8gt2sfp Ruijie rg-nbs3200-8gt4xs Firmware Ruijie rg-nbs3100-8gt2sfp-p Firmware Ruijie rg-rap6260\(h\)-d Ruijie rg-s1930-24gt4sfp Firmware Ruijie rg-rap2260\(e\) Ruijie rg-eg105g-p Firmware Ruijie rg-eg1000c Ruijie rg-rap2200\(e\) Ruijie rg-rap1200\(f\) Ruijie rg-eg305gh-p-e Firmware Ruijie rg-eg2000ce Ruijie rg-eg310gh-e Firmware Ruijie rg-nbs3200-48gt4xs Ruijie rg-rap1261 Firmware Ruijie re-eg1000m Ruijie rg-rap1200\(p\) Ruijie rg-nbs3200-24sfp Firmware Ruijie rg-rap2260\(f\) Firmware Ruijie rg-nbc512 Ruijie rg-eg105gw-x Ruijie rg-eg105g-e Ruijie rg-ew1200g Firmware Ruijie rg-rap2266 Ruijie rg-nbs3100-8gt2sfp-p Ruijie rg-nbc512 Firmware Ruijie rg-nbs3200-48gt4xs Firmware Ruijie rg-eg3000eu Ruijie rg-s1930-24t4sfp Ruijie rg-eg3230 Ruijie rg-s1930-8gt2sfp Firmware Ruijie rg-rap6260\(h\) Firmware Ruijie rg-ew1200 Ruijie rg-rap6202\(g\) Firmware Ruijie rg-rap2260\(g\) Ruijie rg-eg105gw-x Firmware Ruijie rg-s1930-8t2sfp-p Firmware Ruijie rg-nbs3200-24gt4xs Ruijie rg-rap2200\(f\) Firmware Ruijie rg-eg2100-p Firmware Ruijie rg-nbc256 Ruijie rg-eg3230 Firmware Ruijie rg-eg3250 Firmware Ruijie rg-s1930-24t4sfp Firmware Ruijie rg-s1930-24gt4sfp-p Firmware Ruijie rg-rap2260\(e\) Firmware Ruijie rg-nbs3100-24gt4sfp-p Firmware
CWE		CWE-94
CPE		cpe:2.3:h:ruijie:rg-rap2200\(f\):-:::::::* cpe:2.3:o:ruijie:rg-eg3250_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-eg105gw-x:-:::::::* cpe:2.3:h:ruijie:rg-eg2100-p:-:::::::* cpe:2.3:h:ruijie:rg-rap1200\(p\):-:::::::* cpe:2.3:o:ruijie:rg-s1930-24gt4sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-s1930-24t4sfp:-:::::::* cpe:2.3:h:ruijie:rg-eg2000ce:-:::::::* cpe:2.3:h:ruijie:rg-rap6262\(g\):-:::::::* cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp:-:::::::* cpe:2.3:h:ruijie:rg-s1930-24t4sfp-p:-:::::::* cpe:2.3:o:ruijie:rg-s1930-8gt2sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs-p:-:::::::* cpe:2.3:o:ruijie:rg-rap1200\(p\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-rap2260\(f\):-:::::::* cpe:2.3:o:ruijie:rg-ew300_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:h:ruijie:rg-eg210g-p:-:::::::* cpe:2.3:h:ruijie:rg-s1930-24gt4sfp-p:-:::::::* cpe:2.3:o:ruijie:rg-s1930-24t4sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-s1930-8t2sfp-p:-:::::::* cpe:2.3:h:ruijie:rg-rap6260\(h\):-:::::::* cpe:2.3:o:ruijie:rg-eg1000e_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-eg2000ce_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-s1930-24t4sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-eg3230_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-ew1200r:-:::::::* cpe:2.3:h:ruijie:rg-rap2266:-:::::::* cpe:2.3:o:ruijie:rg-eg305gh-p-e_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-s1930-8t2sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap1201_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp:-:::::::* cpe:2.3:h:ruijie:rg-eg105g:-:::::::* cpe:2.3:o:ruijie:rg-rap2266_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbs3200-8gt4xs_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-eg2100-p_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-nbs3100-48gt4sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-rap73hd:-:::::::* cpe:2.3:h:ruijie:rg-rap6202\(g\):-:::::::* cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs-p:-:::::::* cpe:2.3:o:ruijie:rg-rap6260\(h\)-d_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap6262_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-eg310gh-e:-:::::::* cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:re-eg1000m:-:::::::* cpe:2.3:h:ruijie:rg-rap2260\(e\):-:::::::* cpe:2.3:o:ruijie:rg-rap73hd_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-rap6260\(h\)-d:-:::::::* cpe:2.3:o:ruijie:rg-ew1200g_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:h:ruijie:rg-eg105g-e:-:::::::* cpe:2.3:h:ruijie:rg-rap6262:-:::::::* cpe:2.3:o:ruijie:rg-eg105g-e_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-eg3000xe_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-rap2200\(e\):-:::::::* cpe:2.3:o:ruijie:rg-eg1000c_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-eg105gw\(t\)_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-ew1200:-:::::::* cpe:2.3:h:ruijie:rg-ew300:-:::::::* cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs:-:::::::* cpe:2.3:h:ruijie:rg-nbc256:-:::::::* cpe:2.3:o:ruijie:rg-eg105g-p_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-rap6262\(g\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-eg305gh-p-e:-:::::::* cpe:2.3:o:ruijie:rg-rap2260\(g\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap6260\(h\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-s1930-24gt4sfp:-:::::::* cpe:2.3:o:ruijie:rg-eg3000eu_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-ew3200gx_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs:-:::::::* cpe:2.3:h:ruijie:rg-s1930-8gt2sfp-p:-:::::::* cpe:2.3:o:ruijie:rg-rap2260\(f\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-rap1260:-:::::::* cpe:2.3:o:ruijie:rg-eg209gs_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-rap1261:-:::::::* cpe:2.3:o:ruijie:rg-eg105g_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-ew300r_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:o:ruijie:rg-rap2260\(e\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-ew1800gx_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:h:ruijie:rg-nbs3200-24sfp:-:::::::* cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-eg3230:-:::::::* cpe:2.3:o:ruijie:rg-rap2200\(e\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-nbs3100-48gt4sfp-p:-:::::::* cpe:2.3:h:ruijie:rg-eg105g-p:-:::::::* cpe:2.3:o:ruijie:rg-rap1261_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-ew1200_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:h:ruijie:rg-rap6260\(g\):-:::::::* cpe:2.3:h:ruijie:rg-s1930-8gt2sfp:-:::::::* cpe:2.3:h:ruijie:rg-nbs3200-8gt4xs:-:::::::* cpe:2.3:h:ruijie:rg-nbc512:-:::::::* cpe:2.3:o:ruijie:rg-eg310gh-e_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-rap2260\(g\):-:::::::* cpe:2.3:o:ruijie:rg-rap6202\(g\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap1200\(f\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbc512_firmware:ac_3.0\(1\)b11p86:::::::* cpe:2.3:h:ruijie:rg-eg3250:-:::::::* cpe:2.3:h:ruijie:rg-ew300r:-:::::::* cpe:2.3:o:ruijie:rg-eg105gw-x_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp-p:-:::::::* cpe:2.3:o:ruijie:rg-s1930-24gt4sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-s1930-8t2sfp-p_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-nbc256_firmware:ac_3.0\(1\)b11p86:::::::* cpe:2.3:o:ruijie:rg-eg210g-p_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:o:ruijie:rg-s1930-8gt2sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:re-eg1000m_firmware:3.0\(1\)b11p216:::::::* cpe:2.3:h:ruijie:rg-eg1000c:-:::::::* cpe:2.3:h:ruijie:rg-eg1000e:-:::::::* cpe:2.3:h:ruijie:rg-eg105gw\(t\):-:::::::* cpe:2.3:o:ruijie:rg-ew1200r_firmware:3.0\(1\)b11p204:::::::* cpe:2.3:o:ruijie:rg-nbs3200-24sfp_firmware:3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-ew1200g:-:::::::* cpe:2.3:h:ruijie:rg-ew3200gx:-:::::::* cpe:2.3:h:ruijie:rg-rap1200\(f\):-:::::::* cpe:2.3:o:ruijie:rg-rap6260\(g\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap1260_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-eg3000xe:-:::::::* cpe:2.3:h:ruijie:rg-s1930-8t2sfp:-:::::::* cpe:2.3:h:ruijie:rg-eg3000eu:-:::::::* cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp-p:-:::::::* cpe:2.3:h:ruijie:rg-rap1201:-:::::::* cpe:2.3:h:ruijie:rg-ew1800gx:-:::::::* cpe:2.3:h:ruijie:rg-eg209gs:-:::::::* cpe:2.3:o:ruijie:rg-rap2260_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:o:ruijie:rg-rap2200\(f\)_firmware:ap_3.0\(1\)b11p218:::::::* cpe:2.3:h:ruijie:rg-rap2260:-:::::::* cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs-p_firmware:3.0\(1\)b11p218:::::::*
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
References	~~(MISC) https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ -~~	(MISC) https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - Patch, Vendor Advisory

03 Aug 2023, 01:15

Type	Values Removed	Values Added
Summary	A command injection vulnerability exists in the EWEB management system of Ruijie Networks ReyeeOS. An unauthenticated attacker could gain supreme control of devices through this vulnerability. The affected products in Ruijie Networks including RG-EW series home routers and repeaters prior to EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches prior to SWITCH_3.0(1)B11P219, RG-EG series business VPN routers prior to EG_3.0(1)B11P219, EAP and RAP series wireless access points prior to AP_3.0(1)B11P219, and NBC series wireless controllers prior to AC_3.0(1)B11P219.	Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

02 Aug 2023, 17:15

Type	Values Removed	Values Added
Summary	Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows remote attackers to gain escalated privileges via crafted POST request to /cgi-bin/luci/api/auth.	A command injection vulnerability exists in the EWEB management system of Ruijie Networks ReyeeOS. An unauthenticated attacker could gain supreme control of devices through this vulnerability. The affected products in Ruijie Networks including RG-EW series home routers and repeaters prior to EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches prior to SWITCH_3.0(1)B11P219, RG-EG series business VPN routers prior to EG_3.0(1)B11P219, EAP and RAP series wireless access points prior to AP_3.0(1)B11P219, and NBC series wireless controllers prior to AC_3.0(1)B11P219.

31 Jul 2023, 14:45

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-07-31 14:15

Updated : 2024-11-21 08:07

NVD link : CVE-2023-34644

Mitre link : CVE-2023-34644

CVE.ORG link : CVE-2023-34644

JSON object : View

Products Affected

ruijie

rg-eg105g
re-eg1000m
rg-nbs3200-48gt4xs-p
rg-eg210g-p_firmware
re-eg1000m_firmware
rg-ew300
rg-nbc512_firmware
rg-rap2200\(e\)_firmware
rg-rap6262
rg-nbs3200-8gt4xs_firmware
rg-rap1200\(p\)
rg-nbc256_firmware
rg-eg1000c_firmware
rg-ew1200_firmware
rg-eg3250
rg-s1930-8t2sfp-p_firmware
rg-rap6260\(h\)-d
rg-eg310gh-e
rg-nbs3200-48gt4xs_firmware
rg-nbs3100-48gt4sfp-p_firmware
rg-rap6260\(h\)_firmware
rg-ew3200gx_firmware
rg-s1930-24gt4sfp-p_firmware
rg-ew1200r
rg-eg105gw\(t\)_firmware
rg-nbs3100-24gt4sfp
rg-nbs3200-24sfp
rg-eg105gw-x_firmware
rg-rap6202\(g\)_firmware
rg-nbs3100-24gt4sfp-p_firmware
rg-eg2100-p
rg-rap2260
rg-ew3200gx
rg-rap6260\(h\)-d_firmware
rg-eg3230
rg-rap2200\(f\)_firmware
rg-eg1000c
rg-rap2260\(g\)_firmware
rg-rap2260\(g\)
rg-nbs3100-24gt4sfp-p
rg-s1930-8t2sfp-p
rg-rap6260\(g\)
rg-nbs3100-48gt4sfp-p
rg-ew1200g
rg-s1930-24t4sfp_firmware
rg-rap1201
rg-ew1200g_firmware
rg-eg105g-e_firmware
rg-ew1200r_firmware
rg-rap1260
rg-eg210g-p
rg-rap1200\(f\)
rg-rap2266_firmware
rg-ew1800gx_firmware
rg-rap2200\(f\)
rg-s1930-24t4sfp-p_firmware
rg-rap2200\(e\)
rg-rap1261_firmware
rg-s1930-24t4sfp-p
rg-rap6262_firmware
rg-ew1200
rg-nbs3200-24gt4xs-p
rg-eg3250_firmware
rg-eg3000xe_firmware
rg-rap1201_firmware
rg-rap2260_firmware
rg-nbs3200-48gt4xs-p_firmware
rg-s1930-8gt2sfp-p_firmware
rg-nbs3200-48gt4xs
rg-eg105g-e
rg-rap2260\(f\)
rg-rap1200\(p\)_firmware
rg-nbc256
rg-s1930-24gt4sfp-p
rg-s1930-8t2sfp
rg-eg1000e
rg-rap73hd_firmware
rg-s1930-8t2sfp_firmware
rg-eg2000ce
rg-eg209gs_firmware
rg-rap6202\(g\)
rg-s1930-24t4sfp
rg-rap73hd
rg-eg3000xe
rg-eg2000ce_firmware
rg-eg105g-p
rg-nbs3100-8gt2sfp
rg-eg105gw\(t\)
rg-nbs3200-24gt4xs_firmware
rg-nbc512
rg-rap6262\(g\)
rg-eg105g-p_firmware
rg-rap1260_firmware
rg-rap2260\(e\)_firmware
rg-eg310gh-e_firmware
rg-eg305gh-p-e
rg-ew1800gx
rg-ew300r_firmware
rg-nbs3100-8gt2sfp_firmware
rg-rap6262\(g\)_firmware
rg-ew300r
rg-rap6260\(h\)
rg-nbs3100-24gt4sfp_firmware
rg-s1930-24gt4sfp
rg-nbs3200-24sfp_firmware
rg-eg1000e_firmware
rg-rap2260\(f\)_firmware
rg-s1930-24gt4sfp_firmware
rg-nbs3200-8gt4xs
rg-rap6260\(g\)_firmware
rg-nbs3100-8gt2sfp-p
rg-s1930-8gt2sfp
rg-nbs3200-24gt4xs-p_firmware
rg-eg2100-p_firmware
rg-eg305gh-p-e_firmware
rg-s1930-8gt2sfp_firmware
rg-rap1200\(f\)_firmware
rg-s1930-8gt2sfp-p
rg-eg3000eu
rg-eg105gw-x
rg-eg3230_firmware
rg-eg209gs
rg-nbs3200-24gt4xs
rg-eg105g_firmware
rg-nbs3100-8gt2sfp-p_firmware
rg-rap1261
rg-rap2260\(e\)
rg-rap2266
rg-ew300_firmware
rg-eg3000eu_firmware

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

9.8 /10