CVE-2023-7330

🗓️ 24 Nov 2025 20:31:19Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

CVE-2023-7330: Ruijie NBR routers allow unauthenticated arbitrary file upload via fileupload.php, enabling remote code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-7330	24 Nov 202520:51	–	circl
CNNVD	Ruijie NBR Router 安全漏洞	24 Nov 202500:00	–	cnnvd
Cvelist	CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php	24 Nov 202520:31	–	cvelist
EUVD	EUVD-2025-198992	24 Nov 202521:31	–	euvd
NVD	CVE-2023-7330	24 Nov 202521:16	–	nvd
Positive Technologies	PT-2025-47958	24 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2023-7330	26 Nov 202516:56	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2023-7330	24 Nov 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php	24 Nov 202520:31	–	vulnrichment

Vulners

CNA

Node

beijing_star-net_ruijie_network_technology nbr_series_routersMatch0

[
  {
    "defaultStatus": "unknown",
    "product": "NBR Series Routers",
    "vendor": "Beijing Star-Net Ruijie Network Technology Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

Source	Link
cnblogs	www.cnblogs.com/Domren/articles/19093295
cn-sec	www.cn-sec.com/archives/1995366.html
rfk0z	www.rfk0z.github.io/posts/Ruijie-NBR-router-fileupload-php-arbitrary-file-upload-vulnerability/
vulncheck	www.vulncheck.com/advisories/ruijie-networks-nbr-routers-unauthenticated-arbitrary-file-upload-via-fileuploadphp
github	www.github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/ruijie/ruijie-nbr-fileupload.yaml

Parameter	Position	Path	Description	CWE
name	request body	/ddi/server/fileupload.php	Unauthenticated arbitrary file upload via /ddi/server/fileupload.php allowing crafted PHP payloads and potential remote code execution	CWE-434
uploadDir	request body	/ddi/server/fileupload.php	Unauthenticated arbitrary file upload via /ddi/server/fileupload.php allowing crafted PHP payloads and potential remote code execution	CWE-434

15 Apr 2026 00:35Current

7.8High risk

Vulners AI Score7.8

CVSS 49.3

EPSS0.00751

SSVC