CVE-2020-36870 json
Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
published 2025-11-07 12 mo ago modified 2026-06-17 4 mo ago also EUVD-2020-30818
- cvss
- 9.2
- version 4.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 49%
- public exploits
- 0
- none known
Summary
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
Patch / fix
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000UE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000CE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000SE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000GE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000ME 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000UE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000XE 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2100-P 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3210 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3220 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3230 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3250 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR108G-P 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1300G-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1700G-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2100G-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2500D-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000D-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6120-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6135-E 11.9(4)B12P1
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6205-E 11.9(4)B12P1
- ruijie.com.cn/gy/xw-aqtg-zw/85638/ advisory
- ruijie.com.cn/gy/xw-aqtg-gw/86747/ advisory
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 11 mo ago
Exploit prediction
0.62% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 9.2 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 9.2 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000UE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000CE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000SE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000GE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000ME
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000UE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000XE
- Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2100-P
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3210
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3220
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3230
- Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3250
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR108G-P
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1300G-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1700G-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2100G-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2500D-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000D-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6120-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6135-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6205-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6210-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6215-E
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR800G
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR950G
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-C
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2000G-C
- Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000G-S
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
ruijie.com.cn
/gy/xw-aqtg-zw/85638/
vendor-advisory, patch
-
ruijie.com.cn
/gy/xw-aqtg-gw/86747/
vendor-advisory, patch
-
cnvd.org.cn
/flaw/show/CNVD-2021-09650
government-resource, third-party-advisory
-
vulncheck.com
/advisories/ruijie-networks-eg-and-nbr-series-routers-rce
third-party-advisory
Sources
- CVE List CVE-2020-36870
- NVD CVE-2020-36870
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.