CVEvulnerability

CVE-2023-38902

8.8 HIGH Published 2023-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

Affected configurations

• ruijie rg-ew1200 firmware 3.0\(1\)b11p219 • ruijie rg-ew1200g pro firmware 3.0\(1\)b11p219 • ruijie rg-ew1200r firmware 3.0\(1\)b11p219 • ruijie rg-ew1300g firmware 3.0\(1\)b11p219 • ruijie rg-ew1800gx pro firmware 3.0\(1\)b11p219 • ruijie rg-ew3000gx pro firmware 3.0\(1\)b11p219 • ruijie rg-ew300 pro firmware 3.0\(1\)b11p219 • ruijie rg-ew300r firmware 3.0\(1\)b11p219 • ruijie rg-ew3200gx pro firmware 3.0\(1\)b11p219 • ruijie rg-nb3200-24gt4xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs1850gc firmware 3.0\(1\)b11p219 • ruijie rg-nbs1850gc v2 firmware 3.0\(1\)b11p219 • ruijie rg-nbs2000 firmware 3.0\(1\)b11p219 • ruijie rg-nbs2009g-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs200 firmware 3.0\(1\)b11p219 • ruijie rg-nbs2026g-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs2026g firmware 3.0\(1\)b11p219 • ruijie rg-nbs226f firmware 3.0\(1\)b11p219 • ruijie rg-nbs228f firmware 3.0\(1\)b11p219 • ruijie rg-nbs252f firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-24gt4sfp-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-24gt4sfp-p v2 firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-24gt4sfp firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-48gt4sfp firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-8gt2sfp-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs3100-8gt2sfp firmware 3.0\(1\)b11p219 • ruijie rg-nbs3200-24gt4xs-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs3200-24sfp\/8gt4xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs3200-48gt4xs-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs3200-48gt4xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs5100-24gt4sfp firmware 3.0\(1\)b11p219 • ruijie rg-nbs5100-48gt4sfp firmware 3.0\(1\)b11p219 • ruijie rg-nbs5200-24gt4x firmware 3.0\(1\)b11p219 • ruijie rg-nbs5200-24sfp\/8gt4xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs5200-48gt4xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs5300-48mg6xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs5528xg firmware 3.0\(1\)b11p219 • ruijie rg-nbs5552xg firmware 3.0\(1\)b11p219 • ruijie rg-nbs5552xg v2.0 firmware 3.0\(1\)b11p219 • ruijie rg-nbs5628xg firmware 3.0\(1\)b11p219 • ruijie rg-nbs5652xg firmware 3.0\(1\)b11p219 • ruijie rg-nbs5710-24gt4sfp-e-p firmware 3.0\(1\)b11p219 • ruijie rg-nbs5710-24gt4sfp-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5710-48gt4sfp-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5750-28gt4xs-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5750v2-24gt4xs-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5750v2-24sfp4xs-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5750v2-48gt4xs-e firmware 3.0\(1\)b11p219 • ruijie rg-nbs5816xs firmware 3.0\(1\)b11p219 • ruijie rg-nbs6002 firmware 3.0\(1\)b11p219 • ruijie rg-nbs6100-20xs4vs2qxs-s firmware 3.0\(1\)b11p219 • ruijie rg-nbs7003 firmware 3.0\(1\)b11p219 • ruijie rg-nbs7006 firmware 3.0\(1\)b11p219 • ruijie rg-s1930-24gt4sfp firmware 3.0\(1\)b11p219 • ruijie rg-s1930-24t4sfp-p firmware 3.0\(1\)b11p219 • ruijie rg-s1930-24t4sfp firmware 3.0\(1\)b11p219 • ruijie rg-s1930-8gt2sfp-p firmware 3.0\(1\)b11p219 • ruijie rg-s1930-8gt2sfp firmware 3.0\(1\)b11p219 • ruijie rg-s1930-8t2sfp-p firmware 3.0\(1\)b11p219 • ruijie rg-eg210g-pe firmware 3.0\(1\)b11p219 … and 36 more

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References