Rg Est310 Firmware
Monthly
Authenticated OS command injection in the Ruijie X30-PRO (and RG-EST310) firmware allows a low-privileged user to execute arbitrary commands on the device by sending a single crafted POST request to the 'module_set' operation handled by /usr/local/lua/dev_sta/nbr_cwmp.lua. According to the CVSS vector (AV:N/AC:L/PR:L/UI:N), exploitation is remote, low complexity, and requires only valid low-level credentials against the management service, with high impact to confidentiality, integrity, and availability. Publicly available exploit code exists, and the EPSS score of 3.05% (87th percentile) indicates elevated relative risk, though there is no confirmation of active exploitation.
Authenticated OS command injection in Ruijie X30-PRO wireless routers and related Ruijie wireless firmware (RG-EAP602, RG-EST350, RG-EW300 PRO, RG-EST310) allows a low-privileged, logged-in user to execute arbitrary system commands by sending a crafted POST request to the pwdmodify handler implemented in /usr/lib/lua/luci/modules/common.lua. The issue is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78), and publicly available exploit code exists - including a dedicated GitHub vulnerability report (flegoity) and accompanying proof-of-concept links - while EPSS sits at 2.66% (roughly the 85th percentile), indicating elevated relative likelihood rather than confirmed active exploitation. Risk concentrates on devices whose web management interface is reachable from untrusted networks; LAN-only or firewalled management interfaces substantially reduce exposure.
Authenticated OS command injection in the Ruijie X30-PRO (and RG-EST310) firmware allows a low-privileged user to execute arbitrary commands on the device by sending a single crafted POST request to the 'module_set' operation handled by /usr/local/lua/dev_sta/nbr_cwmp.lua. According to the CVSS vector (AV:N/AC:L/PR:L/UI:N), exploitation is remote, low complexity, and requires only valid low-level credentials against the management service, with high impact to confidentiality, integrity, and availability. Publicly available exploit code exists, and the EPSS score of 3.05% (87th percentile) indicates elevated relative risk, though there is no confirmation of active exploitation.
Authenticated OS command injection in Ruijie X30-PRO wireless routers and related Ruijie wireless firmware (RG-EAP602, RG-EST350, RG-EW300 PRO, RG-EST310) allows a low-privileged, logged-in user to execute arbitrary system commands by sending a crafted POST request to the pwdmodify handler implemented in /usr/lib/lua/luci/modules/common.lua. The issue is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78), and publicly available exploit code exists - including a dedicated GitHub vulnerability report (flegoity) and accompanying proof-of-concept links - while EPSS sits at 2.66% (roughly the 85th percentile), indicating elevated relative likelihood rather than confirmed active exploitation. Risk concentrates on devices whose web management interface is reachable from untrusted networks; LAN-only or firewalled management interfaces substantially reduce exposure.