high8.8Public exploit code
CVE-2021-43164
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)2022-05-11 · remote · hardware
Impact
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruijienetworks | Reyeeos | through 1.55.1915_ew_3.0\(1\)b11p55 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167099/Ruijie-Reyee-Mesh-Router-Remote-Code-Execution.html
- https://seclists.org/fulldisclosure/2022/May/0
- http://packetstormsecurity.com/files/167099/Ruijie-Reyee-Mesh-Router-Remote-Code-Execution.html
- https://seclists.org/fulldisclosure/2022/May/0