CVE-2023-50993

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-20 · updated 2026-06-17
Weakness: CWE-78

Description

Ruijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 was discovered to contain a command injection vulnerability via the function downFiles.

Affected products

Ruijie Rg-Ws6008 Firmware: 11.9(6)w3b2_g2c6-01_10221911
Ruijie Rg-Ws6108 Firmware: 11.9(6)w3b2_g2c6-01_10221911

References

https://github.com/ef4tless/vuln/blob/master/iot/WS6008-WS6108/1.md
https://github.com/ef4tless/vuln/blob/master/iot/WS6008-WS6108/1.md

Get alerted when CVE-2023-50993 or the next vulnerability affects your stack