CVE-2023-48849

Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-12-06

Last modified

2024-08-02

Affected products

• Rg-eg1000c Firmware (Ruijie)
• Rg-eg1000e Firmware (Ruijie)
• Rg-eg105g-e Firmware (Ruijie)
• Rg-eg105g-p Firmware (Ruijie)
• Rg-eg105g-pe Firmware (Ruijie)
• Rg-eg105g Firmware (Ruijie)
• Rg-eg105g V2 Firmware (Ruijie)
• Rg-eg105gw-x Firmware (Ruijie)
• Rg-eg105gw(t) Firmware (Ruijie)
• Rg-eg2000ce Firmware (Ruijie)
• Rg-eg209gs Firmware (Ruijie)
• Rg-eg2100-p Firmware (Ruijie)
• Rg-eg210g-e Firmware (Ruijie)
• Rg-eg210g-p Firmware (Ruijie)
• Rg-eg210g-pe Firmware (Ruijie)
• Rg-eg3000eu Firmware (Ruijie)
• Rg-eg3000xe Firmware (Ruijie)
• Rg-eg305gh-p-e Firmware (Ruijie)
• Rg-eg310gh-e Firmware (Ruijie)
• Rg-eg3230 Firmware (Ruijie)
• Rg-eg3250 Firmware (Ruijie)

References

• https://github.com/delsploit/CVE-2023-48849