CVE-2021-43160: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

PT-2022-11798

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the doSwitchApi function in the...

CVE-2021-43159: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

CVE-2021-43163: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the checkNet function in /cgi-bin/luci/api/auth...

PT-2022-11799

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the runPackDiagnose function in t...

PT-2022-11796

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation. The issue is related to the setSessionTime function in the...

PT-2022-11800

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation via the checkNet function in the "/cgi-bin/luci/api/auth" AP...

CVE-2021-43161: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

锐捷网络 RG-EW Series Routers 命令注入漏洞

The Ruijie RG-EW Series Routers is a router from China's Ruijie Networks Ruijie. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the doSwitchApi function in /cgi-bin/luci/api/switch. The following products and versions are affected: ReyeeOS 1.55.1915...

锐捷网络 RG-EW Series Routers 命令注入漏洞

Ruijie RG-EW Series Routers is a router from Ruijie Networks Ruijie, China. A command injection vulnerability exists in Ruijie RG-EW Series Routers, which originates from the setSessionTime function in /cgi-bin/luci/api/common. The following products and versions are affected: ReyeeOS 1.55.1915 /...

PT-2018-12314

Name of the Vulnerable Software and Affected Versions Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the AP mode settings feature. This is specifically related to the /cgi-bin/luci/api/misystem/set router wifiap endpoint, where an attacker can execut...

CVE-2018-14060: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/setrouterwifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...