8.8

CVE-2023-38902

Exploit
A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruijie ≫ Rg-ew1200 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew1200 Version -
Ruijie ≫ Rg-ew1200g Pro Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew1200g Pro Version -
Ruijie ≫ Rg-ew1200r Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew1200r Version -
Ruijie ≫ Rg-ew1300g Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew1300g Version -
Ruijie ≫ Rg-ew1800gx Pro Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew1800gx Pro Version -
Ruijie ≫ Rg-ew3000gx Pro Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew3000gx Pro Version -
Ruijie ≫ Rg-ew300 Pro Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew300 Pro Version -
Ruijie ≫ Rg-ew300r Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew300r Version -
Ruijie ≫ Rg-ew3200gx Pro Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-ew3200gx Pro Version -
Ruijie ≫ Rg-nb3200-24gt4xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nb3200-24gt4xs Version -
Ruijie ≫ Rg-nbs1850gc Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs1850gc Version -
Ruijie ≫ Rg-nbs1850gc V2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs1850gc V2 Version -
Ruijie ≫ Rg-nbs2000 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs2000 Version -
Ruijie ≫ Rg-nbs2009g-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs2009g-p Version -
Ruijie ≫ Rg-nbs200 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs200 Version -
Ruijie ≫ Rg-nbs2026g-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs2026g-p Version -
Ruijie ≫ Rg-nbs2026g Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs2026g Version -
Ruijie ≫ Rg-nbs226f Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs226f Version -
Ruijie ≫ Rg-nbs228f Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs228f Version -
Ruijie ≫ Rg-nbs252f Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs252f Version -
Ruijie ≫ Rg-nbs3100-24gt4sfp-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-24gt4sfp-p Version -
Ruijie ≫ Rg-nbs3100-24gt4sfp-p V2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-24gt4sfp-p V2 Version -
Ruijie ≫ Rg-nbs3100-24gt4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-24gt4sfp Version -
Ruijie ≫ Rg-nbs3100-48gt4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-48gt4sfp Version -
Ruijie ≫ Rg-nbs3100-8gt2sfp-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-8gt2sfp-p Version -
Ruijie ≫ Rg-nbs3100-8gt2sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3100-8gt2sfp Version -
Ruijie ≫ Rg-nbs3200-24gt4xs-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3200-24gt4xs-p Version -
Ruijie ≫ Rg-nbs3200-24sfp/8gt4xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3200-24sfp/8gt4xs Version -
Ruijie ≫ Rg-nbs3200-48gt4xs-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3200-48gt4xs-p Version -
Ruijie ≫ Rg-nbs3200-48gt4xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs3200-48gt4xs Version -
Ruijie ≫ Rg-nbs5100-24gt4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5100-24gt4sfp Version -
Ruijie ≫ Rg-nbs5100-48gt4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5100-48gt4sfp Version -
Ruijie ≫ Rg-nbs5200-24gt4x Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5200-24gt4x Version -
Ruijie ≫ Rg-nbs5200-24sfp/8gt4xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5200-24sfp/8gt4xs Version -
Ruijie ≫ Rg-nbs5200-48gt4xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5200-48gt4xs Version -
Ruijie ≫ Rg-nbs5300-48mg6xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5300-48mg6xs Version -
Ruijie ≫ Rg-nbs5528xg Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5528xg Version -
Ruijie ≫ Rg-nbs5552xg Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5552xg Version -
Ruijie ≫ Rg-nbs5552xg V2.0 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5552xg V2.0 Version -
Ruijie ≫ Rg-nbs5628xg Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5628xg Version -
Ruijie ≫ Rg-nbs5652xg Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5652xg Version -
Ruijie ≫ Rg-nbs5710-24gt4sfp-e-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5710-24gt4sfp-e-p Version -
Ruijie ≫ Rg-nbs5710-24gt4sfp-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5710-24gt4sfp-e Version -
Ruijie ≫ Rg-nbs5710-48gt4sfp-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5710-48gt4sfp-e Version -
Ruijie ≫ Rg-nbs5750-28gt4xs-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5750-28gt4xs-e Version -
Ruijie ≫ Rg-nbs5750v2-24gt4xs-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5750v2-24gt4xs-e Version -
Ruijie ≫ Rg-nbs5750v2-24sfp4xs-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5750v2-24sfp4xs-e Version -
Ruijie ≫ Rg-nbs5750v2-48gt4xs-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5750v2-48gt4xs-e Version -
Ruijie ≫ Rg-nbs5816xs Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs5816xs Version -
Ruijie ≫ Rg-nbs6002 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs6002 Version -
Ruijie ≫ Rg-nbs6100-20xs4vs2qxs-s Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs6100-20xs4vs2qxs-s Version -
Ruijie ≫ Rg-nbs7003 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs7003 Version -
Ruijie ≫ Rg-nbs7006 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbs7006 Version -
Ruijie ≫ Rg-s1930-24gt4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-24gt4sfp Version -
Ruijie ≫ Rg-s1930-24t4sfp-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-24t4sfp-p Version -
Ruijie ≫ Rg-s1930-24t4sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-24t4sfp Version -
Ruijie ≫ Rg-s1930-8gt2sfp-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-8gt2sfp-p Version -
Ruijie ≫ Rg-s1930-8gt2sfp Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-8gt2sfp Version -
Ruijie ≫ Rg-s1930-8t2sfp-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-s1930-8t2sfp-p Version -
Ruijie ≫ Rg-eg210g-pe Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg210g-pe Version -
Ruijie ≫ Rg-eg210g-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg210g-e Version -
Ruijie ≫ Rg-eg105g-pe Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg105g-pe Version -
Ruijie ≫ Rg-eg105g-e Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg105g-e Version -
Ruijie ≫ Rg-eg105g V2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg105g V2 Version -
Ruijie ≫ Rg-eg210g-p Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eg210g-p Version -
Ruijie ≫ Rg-rap1260(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap1260(g) Version -
Ruijie ≫ Rg-rap1200(e) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap1200(e) Version -
Ruijie ≫ Rg-rap1200(f) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap1200(f) Version -
Ruijie ≫ Rg-rap120v2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap120v2 Version -
Ruijie ≫ Rg-rap100 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap100 Version -
Ruijie ≫ Rg-rap120 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap120 Version -
Ruijie ≫ Rg-rap6260(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap6260(g) Version -
Ruijie ≫ Rg-rap2260(e) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap2260(e) Version -
Ruijie ≫ Rg-rap2260(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap2260(g) Version -
Ruijie ≫ Rg-rap2200(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap2200(g) Version -
Ruijie ≫ Rg-rap2200(e) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap2200(e) Version -
Ruijie ≫ Rg-rap2200(f) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap2200(f) Version -
Ruijie ≫ Rg-eap101 V2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap101 V2 Version -
Ruijie ≫ Rg-eap102 V2 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap102 V2 Version -
Ruijie ≫ Rg-eap162(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap162(g) Version -
Ruijie ≫ Rg-eap102(f) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap102(f) Version -
Ruijie ≫ Rg-eap102 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap102 Version -
Ruijie ≫ Rg-eap101 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap101 Version -
Ruijie ≫ Rg-rap630ioda Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap630ioda Version -
Ruijie ≫ Rg-rap630cd Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap630cd Version -
Ruijie ≫ Rg-rap6261(e) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap6261(e) Version -
Ruijie ≫ Rg-rap6261(cd) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-rap6261(cd) Version -
Ruijie ≫ Rg-eap262(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap262(g) Version -
Ruijie ≫ Rg-eap212(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap212(g) Version -
Ruijie ≫ Rg-eap212(f) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap212(f) Version -
Ruijie ≫ Rg-eap202 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap202 Version -
Ruijie ≫ Rg-eap201 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap201 Version -
Ruijie ≫ Rg-eap602 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap602 Version -
Ruijie ≫ Rg-eap662(g) Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-eap662(g) Version -
Ruijie ≫ Rg-nbc256 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbc256 Version -
Ruijie ≫ Rg-nbc512 Firmware Version 3.0(1)b11p219
   Ruijie ≫ Rg-nbc512 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.58% 0.839
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37
Third Party Advisory
Exploit