What’s Vulnerable › Vulnerabilities

CVE-2023-27796

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-26 · updated 2026-06-17
• Weakness: CWE-77

Description

RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua.

Affected products

• Ruijienetworks Rg-Ew1200G Pro Firmware: ew_3.0(1)b11p204
• Ruijienetworks Rg-Ew1800Gx Pro Firmware: ew_3.0(1)b11p204
• Ruijienetworks Rg-Ew3200Gx Pro Firmware: ew_3.0(1)b11p204

References

• https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series
• https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series

Get alerted when CVE-2023-27796 or the next vulnerability affects your stack