Rg Ew300T Firmware
Monthly
Authenticated OS command injection in Ruijie X30 Pro (firmware X30-PRO-V1_09241521) and RG-EW300T router firmware lets an attacker with a valid management session execute arbitrary OS commands on the device via a crafted POST request to the module_get handler. Publicly available exploit code exists, though there is no evidence of confirmed active exploitation (no CISA KEV listing). EPSS is 2.76% (86th percentile), suggesting elevated but not mass-exploitation risk; the CVSS vector indicates at least low-privileged authentication (PR:L) is required and user interaction is not.
Authenticated OS command injection in Ruijie X30 Pro (firmware X30-PRO-V1_09241521) and RG-EW300T router firmware lets an attacker with a valid management session execute arbitrary OS commands on the device via a crafted POST request to the module_get handler. Publicly available exploit code exists, though there is no evidence of confirmed active exploitation (no CISA KEV listing). EPSS is 2.76% (86th percentile), suggesting elevated but not mass-exploitation risk; the CVSS vector indicates at least low-privileged authentication (PR:L) is required and user interaction is not.