CRITICAL🇬🇧 English

CVE-2023-34644

CVSS 9.8v3.1pub. 2023-07-31upd. 2024-11-21

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ruijie Re Eg1000m

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Re Eg1000m Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg1000c

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg1000c Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg1000e

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg1000e Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg105g

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg105g E

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg105g E Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg105g Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg105g P

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg105g P Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg105gw\(t\)

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg105gw\(t\) Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg105gw X

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg105gw X Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg2000ce

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg2000ce Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg209gs

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg209gs Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg2100 P

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg2100 P Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg210g P

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg210g P Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg3000eu

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg3000eu Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg3000xe

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg3000xe Firmware

    OS
    Ruijie
    3.0\(1\)b11p216

  • Ruijie Rg Eg305gh P E

    HW
    Ruijie
    wszystkie wersje

  • Ruijie Rg Eg305gh P E Firmware

    OS
    Ruijie
    3.0\(1\)b11p216
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEVPN
CWE
Referencje

Powiązane podatności

CVE-2023-48849CRITICAL9.8PL ✓ten sam produkt

RCE bez uwierzytelnienia w routerach Ruijie EG Series (Auth Bypass)

CVE-2025-56086HIGH8.8ten sam produkt

OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowin...

CVE-2025-56077HIGH8.8ten sam produkt

OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary co...

CVE-2025-56085HIGH8.8ten sam produkt

OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowin...

CVE-2025-56090HIGH8.8ten sam produkt

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing at...