Remote code execution

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless...

Remote code execution

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

CVE-2021-43159

CVE-2021-43159 affects Ruijie Networks RG-EW Series Routers (up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55). The vulnerability arises via the setSessionTime function in /cgi-bin/luci/api/common, enabling Remote Code Execution (RCE). CVSS metrics show a high-severity issue (CVSS v3.1 base score 8.8; n...

CVE-2021-43162

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose...

CVE-2021-43162

The CVE-2021-43162 entry concerns Ruijie Networks RG-EW Series Routers (ReyeeOS up to 1.55.1915 / EW_3.0(1)B11P55) and a flaw in the runPackDiagnose function exposed via /cgi-bin/luci/api/diagnose. The issue enables Remote Code Execution (RCE). Affected component/file: runPackDiagnose in the LUCI...

CVE-2021-43160

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

CVE-2021-43161

CVE-2021-43161 affects Ruijie RG-EW Series Routers (Ruijie Networks) running ReyeeOS up to 1.55.1915 / EW_3.0(1)B11P55. The vulnerability is triggered via the doSwitchApi function in /cgi-bin/luci/api/switch, enabling Remote Code Execution. Several sources describe it as an RCE due to the path an...

CVE-2021-43161

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

CVE-2021-43164

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless...

CVE-2021-43164

CVE-2021-43164 affects Ruijie RG-EW Series routers running ReyeeOS up to 1.55.1915 / EW_3.0(1)B11P55. The vulnerability is an RCE via the updateVersion function in /cgi-bin/luci/api/wireless, with PoC and public exploit code showing authenticated access can trigger code execution on affected devi...

CVE-2021-43162: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose...

CVE-2021-43163: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the checkNet function in /cgi-bin/luci/api/auth...

CVE-2021-43159: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

CVE-2021-43161: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

CVE-2021-43164: Improper Neutralization of Special Elements used in an OS Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless...

CVE-2021-43160: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

锐捷网络 RG-EW Series Routers 命令注入漏洞

The Ruijie RG-EW Series Routers is a router from China's Ruijie Networks Ruijie. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the switchFastDhcp function in /cgi-bin/luci/api/diagnose. The following products and versions are affected: ReyeeOS...

锐捷网络 RG-EW Series Routers 命令注入漏洞

Ruijie RG-EW Series Routers is a router from Ruijie Networks Ruijie, China. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the setSessionTime function in /cgi-bin/luci/api/common. The following products and versions are affected: ReyeeOS 1.55.1915 /...

锐捷网络 RG-EW Series Routers 命令注入漏洞

The Ruijie RG-EW Series Routers is a router from China's Ruijie Networks Ruijie. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the checkNet function in /cgi-bin/luci/api/auth. The following products and versions are affected: ReyeeOS 1.55.1915 /...

锐捷网络 RG-EW Series Routers 命令注入漏洞

The Ruijie RG-EW Series Routers is a router from China's Ruijie Networks Ruijie. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the doSwitchApi function in /cgi-bin/luci/api/switch. The following products and versions are affected: ReyeeOS 1.55.1915...