Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S19…

published 2023-07-31 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-38688

cvss: 9.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.8%; EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits: 0; none known

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

Patch / fix

links 1

ruijie.com.cn/gy/xw-aqtg-gw/91389/ advisory

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: total
Assessed: 2 y ago (2024-10-22)

Exploit prediction

1.81% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

ruijienetworks rg-ew1200
ruijienetworks rg-s1930
ruijienetworks rg-eg350
ruijienetworks eap
ruijienetworks rap
ruijienetworks nbc

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

ruijie.com.cn /gy/xw-aqtg-gw/91389/
patch, vendor-advisory
ruijienetworks.com /support/securityBulletins/cybersecurity_bulletins/10001

Sources

CVE List CVE-2023-34644
NVD CVE-2023-34644

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary