HIGH🇵🇱 Wersja polska

CVE-2023-38902

CVSS 8.8v3.1pub. 2023-08-17upd. 2024-11-21

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Ruijie Rg Ew1200

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew1200 Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew1200g Pro

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew1200g Pro Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew1200r

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew1200r Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew1300g

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew1300g Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew1800gx Pro

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew1800gx Pro Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew3000gx Pro

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew3000gx Pro Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew300 Pro

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew300 Pro Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew300r

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew300r Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Ew3200gx Pro

    HW
    Ruijie
    all versions

  • Ruijie Rg Ew3200gx Pro Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nb3200 24gt4xs

    HW
    Ruijie
    all versions

  • Ruijie Rg Nb3200 24gt4xs Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nbs1850gc

    HW
    Ruijie
    all versions

  • Ruijie Rg Nbs1850gc Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nbs1850gc V2

    HW
    Ruijie
    all versions

  • Ruijie Rg Nbs1850gc V2 Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nbs200

    HW
    Ruijie
    all versions

  • Ruijie Rg Nbs2000

    HW
    Ruijie
    all versions

  • Ruijie Rg Nbs2000 Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nbs2009g P

    HW
    Ruijie
    all versions

  • Ruijie Rg Nbs2009g P Firmware

    OS
    Ruijie
    3.0\(1\)b11p219

  • Ruijie Rg Nbs200 Firmware

    OS
    Ruijie
    3.0\(1\)b11p219
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
VPN
CWE
References

Related vulnerabilities

CVE-2024-24116CRITICAL9.8PL ✓same product

Nieautoryzowane uzyskanie uprawnień w Ruijie RG-NBS2009G-P via config_menu.htm

CVE-2024-24117CRITICAL9.8PL ✓same product

Nieprawidłowe uprawnienia w Ruijie RG-NBS2009G-P umożliwiają privilege escalation

CVE-2023-34644CRITICAL9.8PL ✓same product

RCE w routerach i urządzeniach sieciowych Ruijie — nieautoryzowane przejęcie uprawnień

CVE-2025-56079HIGH8.8same product

OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execut...

CVE-2025-56083HIGH8.8same product

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitra...