EUVD-2025-198992

🗓️ 24 Nov 2025 21:31:00Reported by EUVDType

Ruijie routers have an unauthenticated file upload via /ddi/server/fileupload.php enabling remote code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-7330	24 Nov 202520:51	–	circl
CNNVD	Ruijie NBR Router 安全漏洞	24 Nov 202500:00	–	cnnvd
CVE	CVE-2023-7330	24 Nov 202520:31	–	cve
Cvelist	CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php	24 Nov 202520:31	–	cvelist
NVD	CVE-2023-7330	24 Nov 202521:16	–	nvd
Positive Technologies	PT-2025-47958	24 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2023-7330	26 Nov 202516:56	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2023-7330	24 Nov 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php	24 Nov 202520:31	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "fdf43105-f554-30b2-bb61-960dbfe12a78",
        "vendor": {
          "name": "Beijing Star-Net Ruijie Network Technology Co., Ltd."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d3032f6c-8441-34c5-b215-5aa1feb7cc30",
        "product": {
          "name": "NBR Series Routers"
        },
        "product_version": "0"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-7330
cn-sec	www.cn-sec.com/archives/1995366.html
github	www.github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/ruijie/ruijie-nbr-fileupload.yaml
rfk0z	www.rfk0z.github.io/posts/Ruijie-NBR-router-fileupload-php-arbitrary-file-upload-vulnerability
cnblogs	www.cnblogs.com/Domren/articles/19093295
vulncheck	www.vulncheck.com/advisories/ruijie-networks-nbr-routers-unauthenticated-arbitrary-file-upload-via-fileuploadphp
rfk0z	www.rfk0z.github.io/posts/Ruijie-NBR-router-fileupload-php-arbitrary-file-upload-vulnerability/

24 Nov 2025 21:31Current

7.7High risk

Vulners AI Score7.7

CVSS 49.3

EPSS0.00751

SSVC