CVE-2022-33128

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-25 · updated 2026-06-17
Weakness: CWE-89

Description

RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /alarm_pi/alarmService.php.

Affected products

Ruijienetworks Rg-Eg350 Firmware: eg_rgos_11.1(6)

References

http://blog.mo60.cn/index.php/archives/ruijie.html
http://blog.mo60.cn/index.php/archives/ruijie.html

Get alerted when CVE-2022-33128 or the next vulnerability affects your stack