What’s Vulnerable › Vulnerabilities

CVE-2023-34644

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-31 · updated 2026-06-17
• Weakness: CWE-94

Description

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

Affected products

• Ruijie Re-Eg1000M Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg1000C Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg1000E Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg105G-E Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg105G-P Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg105G Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg105Gw(T) Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg105Gw-X Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg2000Ce Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg209Gs Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg2100-P Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg210G-P Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg3000Eu Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg3000Xe Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg305Gh-P-E Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg310Gh-E Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg3230 Firmware: 3.0(1)b11p216
• Ruijie Rg-Eg3250 Firmware: 3.0(1)b11p216
• Ruijie Rg-Ew1200 Firmware: 3.0(1)b11p204
• Ruijie RG-EW1200G: 3.0(1)b11p204
• Ruijie Rg-Ew1200R Firmware: 3.0(1)b11p204
• Ruijie Rg-Ew1800Gx Firmware: 3.0(1)b11p204
• Ruijie Rg-Ew300 Firmware: 3.0(1)b11p204
• Ruijie Rg-Ew300R Firmware: 3.0(1)b11p204
• Ruijie Rg-Ew3200Gx Firmware: 3.0(1)b11p204
• Ruijie Rg-Nbc256 Firmware: ac_3.0(1)b11p86
• Ruijie Rg-Nbc512 Firmware: ac_3.0(1)b11p86
• Ruijie Rg-Nbs3100-24Gt4Sfp-P Firmware: 3.0(1)b11p218
• Ruijie Rg-Nbs3100-24Gt4Sfp Firmware: 3.0(1)b11p218
• Ruijie Rg-Nbs3100-48Gt4Sfp-P Firmware: 3.0(1)b11p218

References

• https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/
• https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001
• https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/
• https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001

Get alerted when CVE-2023-34644 or the next vulnerability affects your stack