CVE-2023-34644

Katalog CVE

CVSS 9.8 · Critical EPSS 1,8%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada ruijie rg-ew1200r firmware, ruijie rg-ew300 firmware +58 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

Rincian

Terbit di NVD

31 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 65 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ patch · advisory vendor
• https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001