CVEvulnerability

CVE-2023-34644

9.8 CRITICAL Published 2023-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

Affected configurations

• ruijie rg-ew1200r firmware 3.0\(1\)b11p204 • ruijie rg-ew300 firmware 3.0\(1\)b11p204 • ruijie rg-ew3200gx firmware 3.0\(1\)b11p204 • ruijie rg-ew1200g firmware 3.0\(1\)b11p204 • ruijie rg-ew1800gx firmware 3.0\(1\)b11p204 • ruijie rg-ew300r firmware 3.0\(1\)b11p204 • ruijie rg-ew1200 firmware 3.0\(1\)b11p204 • ruijie rg-eg3000xe firmware 3.0\(1\)b11p216 • ruijie rg-eg105g firmware 3.0\(1\)b11p216 • ruijie rg-eg305gh-p-e firmware 3.0\(1\)b11p216 • ruijie rg-eg105g-p firmware 3.0\(1\)b11p216 • ruijie rg-eg3230 firmware 3.0\(1\)b11p216 • ruijie rg-eg1000e firmware 3.0\(1\)b11p216 • ruijie rg-eg105g-e firmware 3.0\(1\)b11p216 • ruijie rg-eg105gw\(t\) firmware 3.0\(1\)b11p216 • ruijie rg-eg105gw-x firmware 3.0\(1\)b11p216 • ruijie rg-eg2000ce firmware 3.0\(1\)b11p216 • ruijie rg-eg2100-p firmware 3.0\(1\)b11p216 • ruijie rg-eg209gs firmware 3.0\(1\)b11p216 • ruijie rg-eg310gh-e firmware 3.0\(1\)b11p216 • ruijie rg-eg3000eu firmware 3.0\(1\)b11p216 • ruijie rg-eg210g-p firmware 3.0\(1\)b11p216 • ruijie rg-eg3250 firmware 3.0\(1\)b11p216 • ruijie re-eg1000m firmware 3.0\(1\)b11p216 • ruijie rg-eg1000c firmware 3.0\(1\)b11p216 • ruijie rg-nbs3100-48gt4sfp-p firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-24gt4xs firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-24sfp firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-8gt4xs firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-24gt4xs-p firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-48gt4xs firmware 3.0\(1\)b11p218 • ruijie rg-nbs3200-48gt4xs-p firmware 3.0\(1\)b11p218 • ruijie rg-nbs3100-24gt4sfp firmware 3.0\(1\)b11p218 • ruijie rg-nbs3100-24gt4sfp-p firmware 3.0\(1\)b11p218 • ruijie rg-nbs3100-8gt2sfp firmware 3.0\(1\)b11p218 • ruijie rg-nbs3100-8gt2sfp-p firmware 3.0\(1\)b11p218 • ruijie rg-rap1260 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2266 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap1261 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap73hd firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2200\(e\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6260\(h\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap1200\(p\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2260\(e\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6262\(g\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6262 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2260 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6202\(g\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap1201 firmware ap 3.0\(1\)b11p218 • ruijie rg-rap1200\(f\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2260\(f\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2200\(f\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6260\(g\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap2260\(g\) firmware ap 3.0\(1\)b11p218 • ruijie rg-rap6260\(h\)-d firmware ap 3.0\(1\)b11p218 • ruijie rg-nbc256 firmware ac 3.0\(1\)b11p86 • ruijie rg-nbc512 firmware ac 3.0\(1\)b11p86 • ruijie rg-s1930-24gt4sfp firmware 3.0\(1\)b11p218 • ruijie rg-s1930-24t4sfp-p firmware 3.0\(1\)b11p218 • ruijie rg-s1930-8gt2sfp firmware 3.0\(1\)b11p218 … and 5 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References