CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
References
Link Resource
https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ruijie:rg-ew1200r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200r:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:ruijie:rg-ew300_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:ruijie:rg-ew3200gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew3200gx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:ruijie:rg-ew1200g_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200g:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:ruijie:rg-ew1800gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1800gx:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:ruijie:rg-ew300r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300r:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:ruijie:rg-ew1200_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:ruijie:rg-eg3000xe_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000xe:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:ruijie:rg-eg105g_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:ruijie:rg-eg305gh-p-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg305gh-p-e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:ruijie:rg-eg105g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g-p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:ruijie:rg-eg3230_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3230:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:ruijie:rg-eg1000e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg1000e:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:ruijie:rg-eg105g-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g-e:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:ruijie:rg-eg105gw\(t\)_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105gw\(t\):-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:ruijie:rg-eg105gw-x_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105gw-x:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:ruijie:rg-eg2000ce_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000ce:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:ruijie:rg-eg2100-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2100-p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:ruijie:rg-eg209gs_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg209gs:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:ruijie:rg-eg310gh-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg310gh-e:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:ruijie:rg-eg3000eu_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000eu:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:ruijie:rg-eg210g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg210g-p:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:ruijie:rg-eg3250_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3250:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:ruijie:re-eg1000m_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:re-eg1000m:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:ruijie:rg-eg1000c_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg1000c:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3100-48gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-48gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-24sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24sfp:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-8gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-8gt4xs:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs-p:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs-p:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp-p:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:ruijie:rg-rap1260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1260:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2266_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2266:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:ruijie:rg-rap1261_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1261:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:ruijie:rg-rap73hd_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap73hd:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2200\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2200\(e\):-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6260\(h\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(h\):-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:ruijie:rg-rap1200\(p\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1200\(p\):-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2260\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(e\):-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6262\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6262\(g\):-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6262_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6262:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6202\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6202\(g\):-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:ruijie:rg-rap1201_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1201:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:ruijie:rg-rap1200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1200\(f\):-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2260\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(f\):-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2200\(f\):-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(g\):-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:ruijie:rg-rap2260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(g\):-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND
cpe:2.3:o:ruijie:rg-rap6260\(h\)-d_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(h\)-d:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND
cpe:2.3:o:ruijie:rg-nbc256_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbc256:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND
cpe:2.3:o:ruijie:rg-nbc512_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbc512:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24gt4sfp:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-24t4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24t4sfp-p:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8gt2sfp:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8gt2sfp-p:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-8t2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8t2sfp-p:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-24t4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24t4sfp:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24gt4sfp-p:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND
cpe:2.3:o:ruijie:rg-s1930-8t2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8t2sfp:-:*:*:*:*:*:*:*

History

08 Aug 2023, 16:02

Type Values Removed Values Added
CWE CWE-94
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References (MISC) https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - (MISC) https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - Patch, Vendor Advisory
CPE cpe:2.3:o:ruijie:rg-rap1200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg305gh-p-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg105gw-x_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew300r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24t4sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3230:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew3200gx:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew300_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2266_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg105g_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap1201_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1201:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg105g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:re-eg1000m_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200g:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6260\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg1000c_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg3250_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap1261_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105gw\(t\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:re-eg1000m:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2200\(f\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6260\(h\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1800gx:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(e\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8t2sfp:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-8gt2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3100-48gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg2000ce_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8gt2sfp:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew1200g_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g-e:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6262\(g\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-48gt4sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2260\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6202\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6202\(g\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2200\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew1200_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-24t4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3100-8gt2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg305gh-p-e:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g-p:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2260\(f\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-24t4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg3000eu_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-8gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2200\(e\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg310gh-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1261:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(h\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6262:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew1800gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew1200r:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg1000e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbc512:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105g:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2266:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg209gs:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2200\(e\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg105gw\(t\)_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg209gs_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-ew300r:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6262\(g\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6262_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg105g-e_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg310gh-e:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg210g-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-8gt4xs:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg3000xe_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2100-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24gt4sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-24gt4xs-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1260:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000xe:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(h\)-d:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8gt2sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-48gt4xs_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3100-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1200\(p\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap2260\(f\):-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24t4sfp:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-8t2sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg1000e:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg3230_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-8t2sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap6260\(g\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbc512_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-8t2sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap1200\(f\):-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-24gt4sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap2260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3200-48gt4xs-p:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-s1930-24gt4sfp-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-24gt4xs-p_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000eu:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg105gw-x:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-s1930-24gt4sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbs3200-24sfp_firmware:3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbc256_firmware:ac_3.0\(1\)b11p86:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg1000c:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap1200\(p\)_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3250:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000ce:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-24gt4sfp-p:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-rap73hd:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap6260\(h\)-d_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg210g-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew3200gx_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap73hd_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-ew1200r_firmware:3.0\(1\)b11p204:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-eg2100-p_firmware:3.0\(1\)b11p216:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-rap1260_firmware:ap_3.0\(1\)b11p218:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbc256:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbs3100-8gt2sfp-p:-:*:*:*:*:*:*:*
First Time Ruijie rg-nbc512 Firmware
Ruijie rg-eg2100-p
Ruijie rg-ew3200gx
Ruijie rg-nbs3200-24gt4xs
Ruijie rg-nbs3200-24gt4xs-p Firmware
Ruijie rg-rap2200\(f\)
Ruijie rg-nbs3100-8gt2sfp
Ruijie rg-rap2260 Firmware
Ruijie rg-nbc512
Ruijie
Ruijie rg-nbc256 Firmware
Ruijie rg-eg3230
Ruijie rg-eg105gw\(t\)
Ruijie rg-rap6260\(g\)
Ruijie rg-ew1800gx Firmware
Ruijie rg-rap73hd Firmware
Ruijie rg-s1930-24gt4sfp Firmware
Ruijie rg-eg3000xe Firmware
Ruijie rg-ew1200 Firmware
Ruijie rg-rap2260\(e\) Firmware
Ruijie rg-s1930-8gt2sfp
Ruijie rg-nbs3200-48gt4xs
Ruijie rg-eg105g-p
Ruijie rg-nbs3100-8gt2sfp-p
Ruijie rg-eg1000e
Ruijie rg-eg2000ce
Ruijie rg-ew1200g
Ruijie rg-nbs3100-48gt4sfp-p Firmware
Ruijie rg-nbs3200-24sfp
Ruijie rg-nbs3200-24gt4xs-p
Ruijie rg-rap2266 Firmware
Ruijie rg-nbc256
Ruijie rg-rap6260\(h\)-d Firmware
Ruijie rg-rap1201
Ruijie rg-nbs3100-24gt4sfp
Ruijie rg-eg105g
Ruijie rg-ew1200r
Ruijie rg-rap2260\(f\)
Ruijie rg-nbs3200-8gt4xs
Ruijie rg-rap2260\(e\)
Ruijie rg-eg105gw-x
Ruijie rg-s1930-8t2sfp-p Firmware
Ruijie rg-eg2000ce Firmware
Ruijie rg-nbs3200-48gt4xs-p
Ruijie re-eg1000m Firmware
Ruijie rg-eg105gw\(t\) Firmware
Ruijie rg-rap6260\(h\) Firmware
Ruijie rg-nbs3100-24gt4sfp-p
Ruijie rg-ew300 Firmware
Ruijie rg-eg310gh-e Firmware
Ruijie rg-nbs3200-8gt4xs Firmware
Ruijie rg-eg105g-e Firmware
Ruijie rg-rap1260 Firmware
Ruijie rg-s1930-8t2sfp-p
Ruijie rg-rap2260\(f\) Firmware
Ruijie rg-s1930-24t4sfp-p Firmware
Ruijie rg-eg210g-p Firmware
Ruijie rg-eg3000xe
Ruijie rg-eg209gs Firmware
Ruijie rg-s1930-24t4sfp Firmware
Ruijie rg-rap2260\(g\) Firmware
Ruijie rg-rap6262
Ruijie rg-ew3200gx Firmware
Ruijie rg-rap73hd
Ruijie rg-ew1800gx
Ruijie rg-rap1200\(p\) Firmware
Ruijie rg-eg1000e Firmware
Ruijie rg-eg3000eu
Ruijie rg-rap1261
Ruijie rg-rap2200\(e\) Firmware
Ruijie rg-s1930-8gt2sfp-p Firmware
Ruijie rg-rap2200\(f\) Firmware
Ruijie rg-s1930-24gt4sfp-p
Ruijie rg-rap6202\(g\)
Ruijie rg-nbs3100-48gt4sfp-p
Ruijie re-eg1000m
Ruijie rg-nbs3200-48gt4xs-p Firmware
Ruijie rg-eg1000c
Ruijie rg-s1930-24gt4sfp
Ruijie rg-eg105g Firmware
Ruijie rg-ew300r Firmware
Ruijie rg-s1930-8gt2sfp Firmware
Ruijie rg-nbs3100-8gt2sfp-p Firmware
Ruijie rg-rap1200\(p\)
Ruijie rg-nbs3200-24sfp Firmware
Ruijie rg-rap1261 Firmware
Ruijie rg-rap6262\(g\) Firmware
Ruijie rg-rap2200\(e\)
Ruijie rg-rap1260
Ruijie rg-s1930-24t4sfp-p
Ruijie rg-rap6260\(h\)-d
Ruijie rg-s1930-24t4sfp
Ruijie rg-eg3250
Ruijie rg-ew1200g Firmware
Ruijie rg-eg209gs
Ruijie rg-rap1200\(f\) Firmware
Ruijie rg-ew1200
Ruijie rg-eg305gh-p-e Firmware
Ruijie rg-ew1200r Firmware
Ruijie rg-eg2100-p Firmware
Ruijie rg-nbs3200-48gt4xs Firmware
Ruijie rg-ew300
Ruijie rg-s1930-8t2sfp
Ruijie rg-rap6202\(g\) Firmware
Ruijie rg-rap1200\(f\)
Ruijie rg-eg3000eu Firmware
Ruijie rg-s1930-8gt2sfp-p
Ruijie rg-eg3250 Firmware
Ruijie rg-eg310gh-e
Ruijie rg-s1930-24gt4sfp-p Firmware
Ruijie rg-eg105gw-x Firmware
Ruijie rg-s1930-8t2sfp Firmware
Ruijie rg-eg305gh-p-e
Ruijie rg-eg1000c Firmware
Ruijie rg-rap2260\(g\)
Ruijie rg-ew300r
Ruijie rg-nbs3200-24gt4xs Firmware
Ruijie rg-rap1201 Firmware
Ruijie rg-eg3230 Firmware
Ruijie rg-rap6260\(h\)
Ruijie rg-rap6260\(g\) Firmware
Ruijie rg-rap6262 Firmware
Ruijie rg-rap2260
Ruijie rg-eg105g-p Firmware
Ruijie rg-eg105g-e
Ruijie rg-nbs3100-8gt2sfp Firmware
Ruijie rg-rap6262\(g\)
Ruijie rg-nbs3100-24gt4sfp Firmware
Ruijie rg-rap2266
Ruijie rg-nbs3100-24gt4sfp-p Firmware
Ruijie rg-eg210g-p

03 Aug 2023, 01:15

Type Values Removed Values Added
Summary A command injection vulnerability exists in the EWEB management system of Ruijie Networks ReyeeOS. An unauthenticated attacker could gain supreme control of devices through this vulnerability. The affected products in Ruijie Networks including RG-EW series home routers and repeaters prior to EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches prior to SWITCH_3.0(1)B11P219, RG-EG series business VPN routers prior to EG_3.0(1)B11P219, EAP and RAP series wireless access points prior to AP_3.0(1)B11P219, and NBC series wireless controllers prior to AC_3.0(1)B11P219. Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

02 Aug 2023, 17:15

Type Values Removed Values Added
Summary Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows remote attackers to gain escalated privileges via crafted POST request to /cgi-bin/luci/api/auth. A command injection vulnerability exists in the EWEB management system of Ruijie Networks ReyeeOS. An unauthenticated attacker could gain supreme control of devices through this vulnerability. The affected products in Ruijie Networks including RG-EW series home routers and repeaters prior to EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches prior to SWITCH_3.0(1)B11P219, RG-EG series business VPN routers prior to EG_3.0(1)B11P219, EAP and RAP series wireless access points prior to AP_3.0(1)B11P219, and NBC series wireless controllers prior to AC_3.0(1)B11P219.

31 Jul 2023, 14:45

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-31 14:15

Updated : 2023-12-10 15:14


NVD link : CVE-2023-34644

Mitre link : CVE-2023-34644

CVE.ORG link : CVE-2023-34644


JSON object : View

Products Affected

ruijie

  • rg-nbs3100-8gt2sfp_firmware
  • rg-eg1000c_firmware
  • rg-nbs3200-8gt4xs
  • rg-rap6202\(g\)_firmware
  • rg-s1930-24gt4sfp-p_firmware
  • rg-s1930-24t4sfp
  • rg-eg2100-p
  • rg-rap1261
  • rg-eg2000ce
  • rg-ew300_firmware
  • rg-eg105gw-x_firmware
  • rg-eg1000c
  • rg-s1930-24t4sfp-p
  • rg-s1930-24gt4sfp-p
  • rg-eg305gh-p-e
  • rg-nbc256_firmware
  • rg-nbs3200-24sfp
  • rg-rap6262_firmware
  • rg-nbs3100-48gt4sfp-p_firmware
  • rg-eg3230
  • rg-eg105g_firmware
  • rg-nbs3200-24gt4xs
  • rg-nbs3200-24gt4xs-p_firmware
  • rg-s1930-8t2sfp-p
  • rg-rap6262\(g\)
  • rg-rap2260\(e\)_firmware
  • rg-eg210g-p_firmware
  • rg-eg3250_firmware
  • rg-rap6260\(g\)_firmware
  • rg-eg1000e_firmware
  • rg-eg105gw\(t\)_firmware
  • rg-eg3000xe_firmware
  • rg-eg2100-p_firmware
  • rg-ew300r
  • rg-ew300r_firmware
  • rg-rap2266_firmware
  • rg-ew300
  • re-eg1000m_firmware
  • re-eg1000m
  • rg-rap6202\(g\)
  • rg-s1930-8gt2sfp
  • rg-nbs3200-48gt4xs-p
  • rg-nbs3100-24gt4sfp-p_firmware
  • rg-s1930-8gt2sfp_firmware
  • rg-ew3200gx
  • rg-eg3000xe
  • rg-rap2266
  • rg-eg105g-e
  • rg-rap6260\(h\)
  • rg-s1930-24t4sfp-p_firmware
  • rg-rap2260\(e\)
  • rg-rap1200\(p\)_firmware
  • rg-nbs3200-48gt4xs
  • rg-rap2260\(f\)
  • rg-ew1200g
  • rg-ew1200_firmware
  • rg-ew1200
  • rg-rap2260
  • rg-rap1200\(f\)_firmware
  • rg-eg3000eu_firmware
  • rg-s1930-8t2sfp
  • rg-rap1200\(p\)
  • rg-s1930-24t4sfp_firmware
  • rg-s1930-24gt4sfp_firmware
  • rg-ew1800gx_firmware
  • rg-eg209gs
  • rg-nbs3100-24gt4sfp-p
  • rg-rap2260\(g\)_firmware
  • rg-rap2200\(e\)_firmware
  • rg-rap2200\(f\)
  • rg-eg105g-p
  • rg-ew1800gx
  • rg-eg209gs_firmware
  • rg-rap73hd
  • rg-nbc256
  • rg-nbc512_firmware
  • rg-nbs3100-8gt2sfp-p_firmware
  • rg-nbs3200-24sfp_firmware
  • rg-rap1260
  • rg-ew1200g_firmware
  • rg-rap2260_firmware
  • rg-eg305gh-p-e_firmware
  • rg-ew1200r
  • rg-rap1200\(f\)
  • rg-ew1200r_firmware
  • rg-rap6262\(g\)_firmware
  • rg-s1930-8gt2sfp-p
  • rg-rap6260\(g\)
  • rg-rap6260\(h\)-d_firmware
  • rg-nbs3200-8gt4xs_firmware
  • rg-nbs3100-24gt4sfp
  • rg-s1930-8gt2sfp-p_firmware
  • rg-nbs3100-8gt2sfp-p
  • rg-eg1000e
  • rg-rap73hd_firmware
  • rg-eg105g
  • rg-s1930-8t2sfp_firmware
  • rg-nbs3200-48gt4xs_firmware
  • rg-rap6260\(h\)-d
  • rg-rap1201
  • rg-rap1261_firmware
  • rg-ew3200gx_firmware
  • rg-eg105g-p_firmware
  • rg-eg310gh-e
  • rg-rap6262
  • rg-eg3000eu
  • rg-nbc512
  • rg-eg105gw-x
  • rg-eg210g-p
  • rg-nbs3100-24gt4sfp_firmware
  • rg-s1930-8t2sfp-p_firmware
  • rg-eg2000ce_firmware
  • rg-rap2200\(e\)
  • rg-nbs3100-48gt4sfp-p
  • rg-nbs3200-24gt4xs_firmware
  • rg-rap2260\(g\)
  • rg-rap1201_firmware
  • rg-nbs3200-24gt4xs-p
  • rg-nbs3200-48gt4xs-p_firmware
  • rg-rap6260\(h\)_firmware
  • rg-eg3230_firmware
  • rg-eg105gw\(t\)
  • rg-eg3250
  • rg-nbs3100-8gt2sfp
  • rg-rap1260_firmware
  • rg-rap2260\(f\)_firmware
  • rg-eg310gh-e_firmware
  • rg-rap2200\(f\)_firmware
  • rg-s1930-24gt4sfp
  • rg-eg105g-e_firmware
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')