Rg Ew3200Gx Firmware
Monthly
Authenticated OS command injection in Ruijie X60 PRO router firmware (V1.00/V2.00, build 1.021.2014) allows an attacker holding low-privilege credentials to run arbitrary system commands via a crafted POST request to the module_set function in /usr/local/lua/dev_sta/nbr_cwmp.lua, yielding full compromise of confidentiality, integrity, and availability (CVSS 3.1 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The same flaw is reported against Ruijie RG-EW3200GX firmware 3.0(1)b11p219. Publicly available exploit code exists (including a GitHub write-up and hosted PoC artifacts), and EPSS places the CVE at roughly 2.57% (85th percentile), so it is a realistically attractive target for exploitation once an attacker can reach the management interface, though it requires at least low-level authentication and is not confirmed as actively exploited (no CISA KEV listing).
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
Authenticated OS command injection in Ruijie X60 PRO router firmware (V1.00/V2.00, build 1.021.2014) allows an attacker holding low-privilege credentials to run arbitrary system commands via a crafted POST request to the module_set function in /usr/local/lua/dev_sta/nbr_cwmp.lua, yielding full compromise of confidentiality, integrity, and availability (CVSS 3.1 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The same flaw is reported against Ruijie RG-EW3200GX firmware 3.0(1)b11p219. Publicly available exploit code exists (including a GitHub write-up and hosted PoC artifacts), and EPSS places the CVE at roughly 2.57% (85th percentile), so it is a realistically attractive target for exploitation once an attacker can reach the management interface, though it requires at least low-level authentication and is not confirmed as actively exploited (no CISA KEV listing).
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.