9.8

CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruijie ≫ Rg-ew1200r Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew1200r Version -
Ruijie ≫ Rg-ew300 Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew300 Version -
Ruijie ≫ Rg-ew3200gx Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew3200gx Version -
Ruijie ≫ Rg-ew1200g Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew1200g Version -
Ruijie ≫ Rg-ew1800gx Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew1800gx Version -
Ruijie ≫ Rg-ew300r Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew300r Version -
Ruijie ≫ Rg-ew1200 Firmware Version 3.0(1)b11p204
   Ruijie ≫ Rg-ew1200 Version -
Ruijie ≫ Rg-eg3000xe Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg3000xe Version -
Ruijie ≫ Rg-eg105g Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg105g Version -
Ruijie ≫ Rg-eg305gh-p-e Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg305gh-p-e Version -
Ruijie ≫ Rg-eg105g-p Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg105g-p Version -
Ruijie ≫ Rg-eg3230 Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg3230 Version -
Ruijie ≫ Rg-eg1000e Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg1000e Version -
Ruijie ≫ Rg-eg105g-e Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg105g-e Version -
Ruijie ≫ Rg-eg105gw(t) Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg105gw(t) Version -
Ruijie ≫ Rg-eg105gw-x Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg105gw-x Version -
Ruijie ≫ Rg-eg2000ce Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg2000ce Version -
Ruijie ≫ Rg-eg2100-p Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg2100-p Version -
Ruijie ≫ Rg-eg209gs Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg209gs Version -
Ruijie ≫ Rg-eg310gh-e Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg310gh-e Version -
Ruijie ≫ Rg-eg3000eu Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg3000eu Version -
Ruijie ≫ Rg-eg210g-p Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg210g-p Version -
Ruijie ≫ Rg-eg3250 Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg3250 Version -
Ruijie ≫ Re-eg1000m Firmware Version 3.0(1)b11p216
   Ruijie ≫ Re-eg1000m Version -
Ruijie ≫ Rg-eg1000c Firmware Version 3.0(1)b11p216
   Ruijie ≫ Rg-eg1000c Version -
Ruijie ≫ Rg-nbs3100-48gt4sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3100-48gt4sfp-p Version -
Ruijie ≫ Rg-nbs3200-24gt4xs Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-24gt4xs Version -
Ruijie ≫ Rg-nbs3200-24sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-24sfp Version -
Ruijie ≫ Rg-nbs3200-8gt4xs Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-8gt4xs Version -
Ruijie ≫ Rg-nbs3200-24gt4xs-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-24gt4xs-p Version -
Ruijie ≫ Rg-nbs3200-48gt4xs Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-48gt4xs Version -
Ruijie ≫ Rg-nbs3200-48gt4xs-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3200-48gt4xs-p Version -
Ruijie ≫ Rg-nbs3100-24gt4sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3100-24gt4sfp Version -
Ruijie ≫ Rg-nbs3100-24gt4sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3100-24gt4sfp-p Version -
Ruijie ≫ Rg-nbs3100-8gt2sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3100-8gt2sfp Version -
Ruijie ≫ Rg-nbs3100-8gt2sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-nbs3100-8gt2sfp-p Version -
Ruijie ≫ Rg-rap1260 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap1260 Version -
Ruijie ≫ Rg-rap2266 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2266 Version -
Ruijie ≫ Rg-rap1261 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap1261 Version -
Ruijie ≫ Rg-rap73hd Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap73hd Version -
Ruijie ≫ Rg-rap2200(e) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2200(e) Version -
Ruijie ≫ Rg-rap6260(h) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6260(h) Version -
Ruijie ≫ Rg-rap1200(p) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap1200(p) Version -
Ruijie ≫ Rg-rap2260(e) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2260(e) Version -
Ruijie ≫ Rg-rap6262(g) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6262(g) Version -
Ruijie ≫ Rg-rap6262 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6262 Version -
Ruijie ≫ Rg-rap2260 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2260 Version -
Ruijie ≫ Rg-rap6202(g) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6202(g) Version -
Ruijie ≫ Rg-rap1201 Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap1201 Version -
Ruijie ≫ Rg-rap1200(f) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap1200(f) Version -
Ruijie ≫ Rg-rap2260(f) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2260(f) Version -
Ruijie ≫ Rg-rap2200(f) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2200(f) Version -
Ruijie ≫ Rg-rap6260(g) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6260(g) Version -
Ruijie ≫ Rg-rap2260(g) Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap2260(g) Version -
Ruijie ≫ Rg-rap6260(h)-d Firmware Version ap_3.0(1)b11p218
   Ruijie ≫ Rg-rap6260(h)-d Version -
Ruijie ≫ Rg-nbc256 Firmware Version ac_3.0(1)b11p86
   Ruijie ≫ Rg-nbc256 Version -
Ruijie ≫ Rg-nbc512 Firmware Version ac_3.0(1)b11p86
   Ruijie ≫ Rg-nbc512 Version -
Ruijie ≫ Rg-s1930-24gt4sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-24gt4sfp Version -
Ruijie ≫ Rg-s1930-24t4sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-24t4sfp-p Version -
Ruijie ≫ Rg-s1930-8gt2sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-8gt2sfp Version -
Ruijie ≫ Rg-s1930-8gt2sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-8gt2sfp-p Version -
Ruijie ≫ Rg-s1930-8t2sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-8t2sfp-p Version -
Ruijie ≫ Rg-s1930-24t4sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-24t4sfp Version -
Ruijie ≫ Rg-s1930-24gt4sfp-p Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-24gt4sfp-p Version -
Ruijie ≫ Rg-s1930-8t2sfp Firmware Version 3.0(1)b11p218
   Ruijie ≫ Rg-s1930-8t2sfp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.81% 0.765
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/
Patch
Vendor Advisory
https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001