CVE-2023-38902

🗓️ 17 Aug 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

Command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219, allowing remote code execution via POST request

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2023-38902	17 Aug 202313:15	–	attackerkb
Circl	CVE-2023-38902	17 Aug 202316:37	–	circl
CNNVD	RG-EW Series Routers 命令注入漏洞	17 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-38902	17 Aug 202300:00	–	cvelist
EUVD	EUVD-2023-42663	3 Oct 202520:07	–	euvd
NVD	CVE-2023-38902	17 Aug 202313:15	–	nvd
OSV	CVE-2023-38902	17 Aug 202313:15	–	osv
Prion	Command injection	17 Aug 202313:15	–	prion
Positive Technologies	PT-2023-26676 · Rg-Nbs +6 · Rg-Nbs +6	17 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-38902	23 May 202504:09	–	redhatcve

NVD

Vulnrichment

Node

ruijie rg-ew1200_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew1200Match-

Node

ruijie rg-ew1200g_pro_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew1200g_proMatch-

Node

ruijie rg-ew1200r_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew1200rMatch-

Node

ruijie rg-ew1300g_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew1300gMatch-

Node

ruijie rg-ew1800gx_pro_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew1800gx_proMatch-

Node

ruijie rg-ew3000gx_pro_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew3000gx_proMatch-

Node

ruijie rg-ew300_pro_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew300_proMatch-

Node

ruijie rg-ew300r_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew300rMatch-

Node

ruijie rg-ew3200gx_pro_firmwareMatch3.0(1)b11p219

AND

ruijie rg-ew3200gx_proMatch-

Node

ruijie rg-nb3200-24gt4xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nb3200-24gt4xsMatch-

Node

ruijie rg-nbs1850gc_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs1850gcMatch-

Node

ruijie rg-nbs1850gc_v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs1850gc_v2Match-

Node

ruijie rg-nbs2000_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs2000Match-

Node

ruijie rg-nbs2009g-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs2009g-pMatch-

Node

ruijie rg-nbs200_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs200Match-

Node

ruijie rg-nbs2026g-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs2026g-pMatch-

Node

ruijie rg-nbs2026g_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs2026gMatch-

Node

ruijie rg-nbs226f_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs226fMatch-

Node

ruijie rg-nbs228f_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs228fMatch-

Node

ruijie rg-nbs252f_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs252fMatch-

Node

ruijie rg-nbs3100-24gt4sfp-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-24gt4sfp-pMatch-

Node

ruijie rg-nbs3100-24gt4sfp-p_v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-24gt4sfp-p_v2Match-

Node

ruijie rg-nbs3100-24gt4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-24gt4sfpMatch-

Node

ruijie rg-nbs3100-48gt4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-48gt4sfpMatch-

Node

ruijie rg-nbs3100-8gt2sfp-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-8gt2sfp-pMatch-

Node

ruijie rg-nbs3100-8gt2sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3100-8gt2sfpMatch-

Node

ruijie rg-nbs3200-24gt4xs-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3200-24gt4xs-pMatch-

Node

ruijie rg-nbs3200-24sfp/8gt4xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3200-24sfp/8gt4xsMatch-

Node

ruijie rg-nbs3200-48gt4xs-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3200-48gt4xs-pMatch-

Node

ruijie rg-nbs3200-48gt4xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs3200-48gt4xsMatch-

Node

ruijie rg-nbs5100-24gt4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5100-24gt4sfpMatch-

Node

ruijie rg-nbs5100-48gt4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5100-48gt4sfpMatch-

Node

ruijie rg-nbs5200-24gt4x_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5200-24gt4xMatch-

Node

ruijie rg-nbs5200-24sfp/8gt4xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5200-24sfp/8gt4xsMatch-

Node

ruijie rg-nbs5200-48gt4xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5200-48gt4xsMatch-

Node

ruijie rg-nbs5300-48mg6xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5300-48mg6xsMatch-

Node

ruijie rg-nbs5528xg_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5528xgMatch-

Node

ruijie rg-nbs5552xg_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5552xgMatch-

Node

ruijie rg-nbs5552xg_v2.0_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5552xg_v2.0Match-

Node

ruijie rg-nbs5628xg_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5628xgMatch-

Node

ruijie rg-nbs5652xg_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5652xgMatch-

Node

ruijie rg-nbs5710-24gt4sfp-e-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5710-24gt4sfp-e-pMatch-

Node

ruijie rg-nbs5710-24gt4sfp-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5710-24gt4sfp-eMatch-

Node

ruijie rg-nbs5710-48gt4sfp-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5710-48gt4sfp-eMatch-

Node

ruijie rg-nbs5750-28gt4xs-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5750-28gt4xs-eMatch-

Node

ruijie rg-nbs5750v2-24gt4xs-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5750v2-24gt4xs-eMatch-

Node

ruijie rg-nbs5750v2-24sfp4xs-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5750v2-24sfp4xs-eMatch-

Node

ruijie rg-nbs5750v2-48gt4xs-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5750v2-48gt4xs-eMatch-

Node

ruijie rg-nbs5816xs_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs5816xsMatch-

Node

ruijie rg-nbs6002_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs6002Match-

Node

ruijie rg-nbs6100-20xs4vs2qxs-s_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs6100-20xs4vs2qxs-sMatch-

Node

ruijie rg-nbs7003_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs7003Match-

Node

ruijie rg-nbs7006_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbs7006Match-

Node

ruijie rg-s1930-24gt4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-24gt4sfpMatch-

Node

ruijie rg-s1930-24t4sfp-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-24t4sfp-pMatch-

Node

ruijie rg-s1930-24t4sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-24t4sfpMatch-

Node

ruijie rg-s1930-8gt2sfp-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-8gt2sfp-pMatch-

Node

ruijie rg-s1930-8gt2sfp_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-8gt2sfpMatch-

Node

ruijie rg-s1930-8t2sfp-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-s1930-8t2sfp-pMatch-

Node

ruijie rg-eg210g-pe_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg210g-peMatch-

Node

ruijie rg-eg210g-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg210g-eMatch-

Node

ruijie rg-eg105g-pe_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg105g-peMatch-

Node

ruijie rg-eg105g-e_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg105g-eMatch-

Node

ruijie rg-eg105g_v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg105g_v2Match-

Node

ruijie rg-eg210g-p_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eg210g-pMatch-

Node

ruijie rg-rap1260(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap1260(g)Match-

Node

ruijie rg-rap1200(e)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap1200(e)Match-

Node

ruijie rg-rap1200(f)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap1200(f)Match-

Node

ruijie rg-rap120v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap120v2Match-

Node

ruijie rg-rap100_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap100Match-

Node

ruijie rg-rap120_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap120Match-

Node

ruijie rg-rap6260(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap6260(g)Match-

Node

ruijie rg-rap2260(e)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap2260(e)Match-

Node

ruijie rg-rap2260(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap2260(g)Match-

Node

ruijie rg-rap2200(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap2200(g)Match-

Node

ruijie rg-rap2200(e)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap2200(e)Match-

Node

ruijie rg-rap2200(f)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap2200(f)Match-

Node

ruijie rg-eap101_v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap101_v2Match-

Node

ruijie rg-eap102_v2_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap102_v2Match-

Node

ruijie rg-eap162(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap162(g)Match-

Node

ruijie rg-eap102(f)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap102(f)Match-

Node

ruijie rg-eap102_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap102Match-

Node

ruijie rg-eap101_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap101Match-

Node

ruijie rg-rap630ioda_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap630iodaMatch-

Node

ruijie rg-rap630cd_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap630cdMatch-

Node

ruijie rg-rap6261(e)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap6261(e)Match-

Node

ruijie rg-rap6261(cd)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-rap6261(cd)Match-

Node

ruijie rg-eap262(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap262(g)Match-

Node

ruijie rg-eap212(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap212(g)Match-

Node

ruijie rg-eap212(f)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap212(f)Match-

Node

ruijie rg-eap202_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap202Match-

Node

ruijie rg-eap201_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap201Match-

Node

ruijie rg-eap602_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap602Match-

Node

ruijie rg-eap662(g)_firmwareMatch3.0(1)b11p219

AND

ruijie rg-eap662(g)Match-

Node

ruijie rg-nbc256_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbc256Match-

Node

ruijie rg-nbc512_firmwareMatch3.0(1)b11p219

AND

ruijie rg-nbc512Match-

Source	Link
gist	www.gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37

Parameter	Position	Path	Description	CWE
remoteIp	request body	/cgi-bin/luci/api/cmd	Command injection via POST to /cgi-bin/luci/api/cmd using remoteIp field	CWE-77

21 Nov 2024 08:14Current

9High risk

Vulners AI Score9

CVSS 3.18.8

EPSS0.01331

SSVC

cve-2023-38902 command injection rg-ew rg-nbs rg-s1930 rg-eg eap rap nbc remote command execution security vulnerability