Rg Ew300 Pro Firmware
Monthly
Authenticated OS command injection in Ruijie X30-PRO wireless routers and related Ruijie wireless firmware (RG-EAP602, RG-EST350, RG-EW300 PRO, RG-EST310) allows a low-privileged, logged-in user to execute arbitrary system commands by sending a crafted POST request to the pwdmodify handler implemented in /usr/lib/lua/luci/modules/common.lua. The issue is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78), and publicly available exploit code exists - including a dedicated GitHub vulnerability report (flegoity) and accompanying proof-of-concept links - while EPSS sits at 2.66% (roughly the 85th percentile), indicating elevated relative likelihood rather than confirmed active exploitation. Risk concentrates on devices whose web management interface is reachable from untrusted networks; LAN-only or firewalled management interfaces substantially reduce exposure.
OS command injection in Ruijie X30-PRO (firmware X30-PRO-V1_09241521) and Ruijie RG-EW300 Pro (firmware 3.0(1)b11p219) allows a low-privilege authenticated attacker to execute arbitrary OS commands via a crafted POST request to the module_get function in /usr/local/lua/dev_sta/networkConnect.lua. Publicly available exploit code exists, and the EPSS score is 2.57% (85th percentile), indicating a moderate likelihood of exploitation, though no active exploitation has been confirmed (not listed in CISA KEV). The vulnerability is remotely exploitable with low complexity but requires valid credentials to the device's web management interface.
Authenticated command injection in Ruijie X30-PRO and RG-EW300 PRO router firmware allows an attacker with low-privileged credentials to execute arbitrary OS commands via a crafted POST request to the module_get function in /usr/local/lua/dev_sta/host_access_delay.lua. Publicly available exploit code exists, and the EPSS score of 3.27% (88th percentile) indicates a moderate likelihood of exploitation attempts. The vulnerability requires network access to the device management interface and valid credentials, limiting realistic risk to exposed management interfaces or LAN-side attackers.
OS command injection in Ruijie X30-PRO firmware (build X30-PRO-V1_09241521) and related RG-EW300 PRO and RG-EAP602 builds allows an authenticated, low-privilege attacker who can reach the LuCI web management interface to execute arbitrary OS commands through a crafted POST request to the setWisp endpoint handled by /usr/lib/lua/luci/modules/wireless.lua. Publicly available exploit code exists, and EPSS rates the issue at 3.15% (88th percentile), though CISA KEV does not list it as confirmed actively exploited. Successful exploitation yields full confidentiality, integrity, and availability impact on the device (CVSS 8.8), and the practical risk is amplified because SOHO/SMB devices frequently ship with default or weak credentials and may expose management over LAN or WAN.
Command injection in Ruijie RG-EW1200 and RG-EW300 Pro router firmware lets authenticated network attackers execute arbitrary operating system commands through a crafted POST request to the module_set handler in /usr/local/lua/dev_config/config_retain.lua. The vulnerable builds are RG-EW1200 firmware 3.0(1)B11P227 and RG-EW300 Pro firmware 3.0(1)B11P219, and exploitation requires network reachability to the web/management interface plus low-privilege credentials (CVSS PR:L). Publicly available exploit code exists, and EPSS is 2.92% (87th percentile), but there is no CISA KEV entry confirming active exploitation; the independent assessment rates this as elevated-priority for affected SOHO router operators rather than an internet-wide emergency.
A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated OS command injection in Ruijie X30-PRO wireless routers and related Ruijie wireless firmware (RG-EAP602, RG-EST350, RG-EW300 PRO, RG-EST310) allows a low-privileged, logged-in user to execute arbitrary system commands by sending a crafted POST request to the pwdmodify handler implemented in /usr/lib/lua/luci/modules/common.lua. The issue is rated CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78), and publicly available exploit code exists - including a dedicated GitHub vulnerability report (flegoity) and accompanying proof-of-concept links - while EPSS sits at 2.66% (roughly the 85th percentile), indicating elevated relative likelihood rather than confirmed active exploitation. Risk concentrates on devices whose web management interface is reachable from untrusted networks; LAN-only or firewalled management interfaces substantially reduce exposure.
OS command injection in Ruijie X30-PRO (firmware X30-PRO-V1_09241521) and Ruijie RG-EW300 Pro (firmware 3.0(1)b11p219) allows a low-privilege authenticated attacker to execute arbitrary OS commands via a crafted POST request to the module_get function in /usr/local/lua/dev_sta/networkConnect.lua. Publicly available exploit code exists, and the EPSS score is 2.57% (85th percentile), indicating a moderate likelihood of exploitation, though no active exploitation has been confirmed (not listed in CISA KEV). The vulnerability is remotely exploitable with low complexity but requires valid credentials to the device's web management interface.
Authenticated command injection in Ruijie X30-PRO and RG-EW300 PRO router firmware allows an attacker with low-privileged credentials to execute arbitrary OS commands via a crafted POST request to the module_get function in /usr/local/lua/dev_sta/host_access_delay.lua. Publicly available exploit code exists, and the EPSS score of 3.27% (88th percentile) indicates a moderate likelihood of exploitation attempts. The vulnerability requires network access to the device management interface and valid credentials, limiting realistic risk to exposed management interfaces or LAN-side attackers.
OS command injection in Ruijie X30-PRO firmware (build X30-PRO-V1_09241521) and related RG-EW300 PRO and RG-EAP602 builds allows an authenticated, low-privilege attacker who can reach the LuCI web management interface to execute arbitrary OS commands through a crafted POST request to the setWisp endpoint handled by /usr/lib/lua/luci/modules/wireless.lua. Publicly available exploit code exists, and EPSS rates the issue at 3.15% (88th percentile), though CISA KEV does not list it as confirmed actively exploited. Successful exploitation yields full confidentiality, integrity, and availability impact on the device (CVSS 8.8), and the practical risk is amplified because SOHO/SMB devices frequently ship with default or weak credentials and may expose management over LAN or WAN.
Command injection in Ruijie RG-EW1200 and RG-EW300 Pro router firmware lets authenticated network attackers execute arbitrary operating system commands through a crafted POST request to the module_set handler in /usr/local/lua/dev_config/config_retain.lua. The vulnerable builds are RG-EW1200 firmware 3.0(1)B11P227 and RG-EW300 Pro firmware 3.0(1)B11P219, and exploitation requires network reachability to the web/management interface plus low-privilege credentials (CVSS PR:L). Publicly available exploit code exists, and EPSS is 2.92% (87th percentile), but there is no CISA KEV entry confirming active exploitation; the independent assessment rates this as elevated-priority for affected SOHO router operators rather than an internet-wide emergency.
A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.