What’s Vulnerable › Vulnerabilities

CVE-2023-38902

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-17 · updated 2026-06-17
• Weakness: CWE-77

Description

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

Affected products

• Ruijie Rg-Eap101 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap101 V2 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap102(F) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap102 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap102 V2 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap162(G) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap201 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap202 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap212(F) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap212(G) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap262(G) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap602 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eap662(G) Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg105G-E Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg105G-Pe Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg105G V2 Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg210G-E Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg210G-P Firmware: 3.0(1)b11p219
• Ruijie Rg-Eg210G-Pe Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew1200 Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew1200G Pro Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew1200R Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew1300G Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew1800Gx Pro Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew3000Gx Pro Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew300 Pro Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew300R Firmware: 3.0(1)b11p219
• Ruijie Rg-Ew3200Gx Pro Firmware: 3.0(1)b11p219
• Ruijie Rg-Nb3200-24Gt4Xs Firmware: 3.0(1)b11p219
• Ruijie Rg-Nbc256 Firmware: 3.0(1)b11p219

References

• https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37
• https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37

Get alerted when CVE-2023-38902 or the next vulnerability affects your stack