critical9.8
CVE-2023-34644
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches S…
Impact
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruijie | Rg-Ew1200r Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew300 Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew3200gx Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew1200g Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew1800gx Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew300r Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Ew1200 Firmware | Version 3.0\(1\)b11p204 |
| Ruijie | Rg-Eg3000xe Firmware | Version 3.0\(1\)b11p216 |
| Ruijie | Rg-Eg105g Firmware | Version 3.0\(1\)b11p216 |
| Ruijie | Rg-Eg305gh-P-E Firmware | Version 3.0\(1\)b11p216 |
| Ruijie | Rg-Eg105g-P Firmware | Version 3.0\(1\)b11p216 |
| Ruijie | Rg-Eg3230 Firmware | Version 3.0\(1\)b11p216 |