CVE-2023-34644
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0...
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
- Record
CVE-2023-34644- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
- Record
CVE-2023-34644- Updated
- 2026-11-02
EUVDEUVD-2023-38688 No score
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
- Record
EUVD-2023-38688- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jprp-jh3h-3w7v
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0...
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows remote attackers to gain escalated privileges via crafted POST request to /cgi-bin/luci/api/auth.
- Record
GHSA-jprp-jh3h-3w7v- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
- ruijienetworks eap
- ruijienetworks nbc
- ruijienetworks rap
- ruijienetworks rg-s1930
- ruijienetworks rg-eg350
- ruijienetworks rg-ew1200
- ruijie re-eg1000m firmware
- ruijie rg-eg1000c firmware
- ruijie rg-eg1000e firmware
- ruijie rg-eg105g-e firmware
- ruijie rg-eg105g-p firmware
- ruijie rg-eg105g firmware
Show 59 moreShow less
- ruijie rg-eg105gw-x firmware
- ruijie rg-eg105gw\(t\) firmware
- ruijie rg-eg2000ce firmware
- ruijie rg-eg209gs firmware
- ruijie rg-eg2100-p firmware
- ruijie rg-eg210g-p firmware
- ruijie rg-eg3000eu firmware
- ruijie rg-eg3000xe firmware
- ruijie rg-eg305gh-p-e firmware
- ruijie rg-eg310gh-e firmware
- ruijie rg-eg3230 firmware
- ruijie rg-eg3250 firmware
- ruijie rg-ew1200 firmware
- ruijie rg-ew1200g firmware
- ruijie rg-ew1200r firmware
- ruijie rg-ew1800gx firmware
- ruijie rg-ew300 firmware
- ruijie rg-ew300r firmware
- ruijie rg-ew3200gx firmware
- ruijie rg-nbc256 firmware
- ruijie rg-nbc512 firmware
- ruijie rg-nbs3100-24gt4sfp-p firmware
- ruijie rg-nbs3100-24gt4sfp firmware
- ruijie rg-nbs3100-48gt4sfp-p firmware
- ruijie rg-nbs3100-8gt2sfp-p firmware
- ruijie rg-nbs3100-8gt2sfp firmware
- ruijie rg-nbs3200-24gt4xs-p firmware
- ruijie rg-nbs3200-24gt4xs firmware
- ruijie rg-nbs3200-24sfp firmware
- ruijie rg-nbs3200-48gt4xs-p firmware
- ruijie rg-nbs3200-48gt4xs firmware
- ruijie rg-nbs3200-8gt4xs firmware
- ruijie rg-rap1200\(f\) firmware
- ruijie rg-rap1200\(p\) firmware
- ruijie rg-rap1201 firmware
- ruijie rg-rap1260 firmware
- ruijie rg-rap1261 firmware
- ruijie rg-rap2200\(e\) firmware
- ruijie rg-rap2200\(f\) firmware
- ruijie rg-rap2260\(e\) firmware
- ruijie rg-rap2260\(f\) firmware
- ruijie rg-rap2260\(g\) firmware
- ruijie rg-rap2260 firmware
- ruijie rg-rap2266 firmware
- ruijie rg-rap6202\(g\) firmware
- ruijie rg-rap6260\(g\) firmware
- ruijie rg-rap6260\(h\)-d firmware
- ruijie rg-rap6260\(h\) firmware
- ruijie rg-rap6262\(g\) firmware
- ruijie rg-rap6262 firmware
- ruijie rg-rap73hd firmware
- ruijie rg-s1930-24gt4sfp-p firmware
- ruijie rg-s1930-24gt4sfp firmware
- ruijie rg-s1930-24t4sfp-p firmware
- ruijie rg-s1930-24t4sfp firmware
- ruijie rg-s1930-8gt2sfp-p firmware
- ruijie rg-s1930-8gt2sfp firmware
- ruijie rg-s1930-8t2sfp-p firmware
- ruijie rg-s1930-8t2sfp firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-34644 is a critical vulnerability (CVSS 9.8) in Ruijienetworks Eap, published July 31, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.