CVEvulnerability
CVE-2023-34644
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-07-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
Affected configurations
• ruijie rg-ew1200r firmware 3.0\(1\)b11p204
• ruijie rg-ew300 firmware 3.0\(1\)b11p204
• ruijie rg-ew3200gx firmware 3.0\(1\)b11p204
• ruijie rg-ew1200g firmware 3.0\(1\)b11p204
• ruijie rg-ew1800gx firmware 3.0\(1\)b11p204
• ruijie rg-ew300r firmware 3.0\(1\)b11p204
• ruijie rg-ew1200 firmware 3.0\(1\)b11p204
• ruijie rg-eg3000xe firmware 3.0\(1\)b11p216
• ruijie rg-eg105g firmware 3.0\(1\)b11p216
• ruijie rg-eg305gh-p-e firmware 3.0\(1\)b11p216
• ruijie rg-eg105g-p firmware 3.0\(1\)b11p216
• ruijie rg-eg3230 firmware 3.0\(1\)b11p216
• ruijie rg-eg1000e firmware 3.0\(1\)b11p216
• ruijie rg-eg105g-e firmware 3.0\(1\)b11p216
• ruijie rg-eg105gw\(t\) firmware 3.0\(1\)b11p216
• ruijie rg-eg105gw-x firmware 3.0\(1\)b11p216
• ruijie rg-eg2000ce firmware 3.0\(1\)b11p216
• ruijie rg-eg2100-p firmware 3.0\(1\)b11p216
• ruijie rg-eg209gs firmware 3.0\(1\)b11p216
• ruijie rg-eg310gh-e firmware 3.0\(1\)b11p216
• ruijie rg-eg3000eu firmware 3.0\(1\)b11p216
• ruijie rg-eg210g-p firmware 3.0\(1\)b11p216
• ruijie rg-eg3250 firmware 3.0\(1\)b11p216
• ruijie re-eg1000m firmware 3.0\(1\)b11p216
• ruijie rg-eg1000c firmware 3.0\(1\)b11p216
• ruijie rg-nbs3100-48gt4sfp-p firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-24gt4xs firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-24sfp firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-8gt4xs firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-24gt4xs-p firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-48gt4xs firmware 3.0\(1\)b11p218
• ruijie rg-nbs3200-48gt4xs-p firmware 3.0\(1\)b11p218
• ruijie rg-nbs3100-24gt4sfp firmware 3.0\(1\)b11p218
• ruijie rg-nbs3100-24gt4sfp-p firmware 3.0\(1\)b11p218
• ruijie rg-nbs3100-8gt2sfp firmware 3.0\(1\)b11p218
• ruijie rg-nbs3100-8gt2sfp-p firmware 3.0\(1\)b11p218
• ruijie rg-rap1260 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2266 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap1261 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap73hd firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2200\(e\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6260\(h\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap1200\(p\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2260\(e\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6262\(g\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6262 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2260 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6202\(g\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap1201 firmware ap 3.0\(1\)b11p218
• ruijie rg-rap1200\(f\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2260\(f\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2200\(f\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6260\(g\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap2260\(g\) firmware ap 3.0\(1\)b11p218
• ruijie rg-rap6260\(h\)-d firmware ap 3.0\(1\)b11p218
• ruijie rg-nbc256 firmware ac 3.0\(1\)b11p86
• ruijie rg-nbc512 firmware ac 3.0\(1\)b11p86
• ruijie rg-s1930-24gt4sfp firmware 3.0\(1\)b11p218
• ruijie rg-s1930-24t4sfp-p firmware 3.0\(1\)b11p218
• ruijie rg-s1930-8gt2sfp firmware 3.0\(1\)b11p218
… and 5 more
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ Patch, Vendor Advisory
- https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001 www.ruijienetworks.com
- https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ Patch, Vendor Advisory
- https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001 www.ruijienetworks.com