rg-boellertshoefe.de Improper Access Control vulnerability OBB-3777130

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Improper Access Control in Ruijie Rg-Ew1200G_Firmware

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...

CVE-2023-4415

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-4415

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

Authentication flaw

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-4415

Summary: CVE-2023-4415 affects Ruijie RG-EW1200G (version 07161417 r483). The issue resides in the /api/sys/login endpoint, causing improper authentication with remote access risk. Multiple connected sources confirm a login bypass/RCE scenario and public disclosure of the exploit (VDB-237518). Ex...

CVE-2023-4415 Ruijie RG-EW1200G login improper authentication

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

Ruijie Networks RG-EW1200G 授权问题漏洞

The Ruijie Networks RG-EW1200G is a wireless router from Ruijie Networks China. An authorization issue vulnerability exists in the Ruijie Networks RG-EW1200G, which stems from improper authentication in file/api/sys/login...

PT-2023-29131 · Ruijie · Ruijie Rg-Ew1200G

Name of the Vulnerable Software and Affected Versions: Ruijie RG-EW1200G version 07161417 r483 Description: A critical issue affects some unknown functionality of the /api/sys/login API endpoint, leading to improper authentication. The attack can be launched remotely. The exploit has been disclos...

CVE-2023-4415: Improper Authentication

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-38902

CVE-2023-38902 describes a command injection in Ruijie RG-EW/RG-NBS/RG-S1930/RG-EG/EAP/RAP/NBC devices. Affected are RG-EW series (EW 3.0(1)B11P219), RG-NBS/S1930 (3.0(1)B11P219), RG-EG (3.0(1)B11P219), EAP/RAP (3.0(1)B11P219), and NBC controllers (AC 3.0(1)B11P219). The root cause is a vulnerabi...

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

PT-2023-26676 · Rg-Nbs +6 · Rg-Nbs +6

Name of the Vulnerable Software and Affected Versions: RG-EW series home routers and repeaters versions EW 3.01B11P204 through EW 3.01B11P219 RG-NBS and RG-S1930 series switches versions SWITCH 3.01B11P218 through SWITCH 3.01B11P219 RG-EG series business VPN routers versions EG 3.01B11P216 throug...

CVE-2023-38902: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

CVE-2023-4169

A vulnerability was found in Ruijie RG-EW1200G 1.01B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/setpasswd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can ...

CVE-2023-4169

A vulnerability was found in Ruijie RG-EW1200G 1.01B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/setpasswd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can ...

CVE-2023-4169 Ruijie RG-EW1200G Administrator Password set_passwd access control

A vulnerability was found in Ruijie RG-EW1200G 1.01B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/setpasswd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can ...

CVE-2023-4169

The CVE-2023-4169 entry affects Ruijie RG-EW1200G model 1.0(1)B1P5. Affected component: /api/sys/set_passwd in Administrator Password Handler. Root cause: improper access controls allow an attacker to reset the administrator password remotely. Impact: attacker can take full control of the router ...

Ruijie Networks RG-EW1200G Access Control Error Vulnerability

Ruijie Networks RG-EW1200G is a wireless router from Ruijie Networks China. An access control error vulnerability exists in Ruijie Networks RG-EW1200G version 1.01B1P5, which originates from an access control error vulnerability in file /api/sys/setpasswd...

PT-2023-28048 · Ruijie · Ruijie Rg-Ew1200G

Name of the Vulnerable Software and Affected Versions: Ruijie RG-EW1200G version 1.01B1P5 Description: A critical issue has been found in the Administrator Password Handler component, specifically affecting an unknown functionality of the file "/api/sys/set passwd". This leads to improper access...