{"id":"CVE-2023-34644","aliases":["EUVD-2023-38688","GHSA-jprp-jh3h-3w7v"],"status":"published","title":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0...","description":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01814,"percentile":0.78823,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2023-07-31T00:00:00Z","modified":"2026-06-17T06:03:54Z","products":[{"vendor":"ruijie","product":"re-eg1000m_firmware"},{"vendor":"ruijie","product":"rg-eg1000c_firmware"},{"vendor":"ruijie","product":"rg-eg1000e_firmware"},{"vendor":"ruijie","product":"rg-eg105g-e_firmware"},{"vendor":"ruijie","product":"rg-eg105g-p_firmware"},{"vendor":"ruijie","product":"rg-eg105g_firmware"},{"vendor":"ruijie","product":"rg-eg105gw-x_firmware"},{"vendor":"ruijie","product":"rg-eg105gw\\(t\\)_firmware"},{"vendor":"ruijie","product":"rg-eg2000ce_firmware"},{"vendor":"ruijie","product":"rg-eg209gs_firmware"},{"vendor":"ruijie","product":"rg-eg2100-p_firmware"},{"vendor":"ruijie","product":"rg-eg210g-p_firmware"},{"vendor":"ruijie","product":"rg-eg3000eu_firmware"},{"vendor":"ruijie","product":"rg-eg3000xe_firmware"},{"vendor":"ruijie","product":"rg-eg305gh-p-e_firmware"},{"vendor":"ruijie","product":"rg-eg310gh-e_firmware"},{"vendor":"ruijie","product":"rg-eg3230_firmware"},{"vendor":"ruijie","product":"rg-eg3250_firmware"},{"vendor":"ruijie","product":"rg-ew1200_firmware"},{"vendor":"ruijie","product":"rg-ew1200g_firmware"},{"vendor":"ruijie","product":"rg-ew1200r_firmware"},{"vendor":"ruijie","product":"rg-ew1800gx_firmware"},{"vendor":"ruijie","product":"rg-ew300_firmware"},{"vendor":"ruijie","product":"rg-ew300r_firmware"},{"vendor":"ruijie","product":"rg-ew3200gx_firmware"},{"vendor":"ruijie","product":"rg-nbc256_firmware"},{"vendor":"ruijie","product":"rg-nbc512_firmware"},{"vendor":"ruijie","product":"rg-nbs3100-24gt4sfp-p_firmware"},{"vendor":"ruijie","product":"rg-nbs3100-24gt4sfp_firmware"},{"vendor":"ruijie","product":"rg-nbs3100-48gt4sfp-p_firmware"},{"vendor":"ruijie","product":"rg-nbs3100-8gt2sfp-p_firmware"},{"vendor":"ruijie","product":"rg-nbs3100-8gt2sfp_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-24gt4xs-p_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-24gt4xs_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-24sfp_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-48gt4xs-p_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-48gt4xs_firmware"},{"vendor":"ruijie","product":"rg-nbs3200-8gt4xs_firmware"},{"vendor":"ruijie","product":"rg-rap1200\\(f\\)_firmware"},{"vendor":"ruijie","product":"rg-rap1200\\(p\\)_firmware"},{"vendor":"ruijie","product":"rg-rap1201_firmware"},{"vendor":"ruijie","product":"rg-rap1260_firmware"},{"vendor":"ruijie","product":"rg-rap1261_firmware"},{"vendor":"ruijie","product":"rg-rap2200\\(e\\)_firmware"},{"vendor":"ruijie","product":"rg-rap2200\\(f\\)_firmware"},{"vendor":"ruijie","product":"rg-rap2260\\(e\\)_firmware"},{"vendor":"ruijie","product":"rg-rap2260\\(f\\)_firmware"},{"vendor":"ruijie","product":"rg-rap2260\\(g\\)_firmware"},{"vendor":"ruijie","product":"rg-rap2260_firmware"},{"vendor":"ruijie","product":"rg-rap2266_firmware"},{"vendor":"ruijie","product":"rg-rap6202\\(g\\)_firmware"},{"vendor":"ruijie","product":"rg-rap6260\\(g\\)_firmware"},{"vendor":"ruijie","product":"rg-rap6260\\(h\\)-d_firmware"},{"vendor":"ruijie","product":"rg-rap6260\\(h\\)_firmware"},{"vendor":"ruijie","product":"rg-rap6262\\(g\\)_firmware"},{"vendor":"ruijie","product":"rg-rap6262_firmware"},{"vendor":"ruijie","product":"rg-rap73hd_firmware"},{"vendor":"ruijie","product":"rg-s1930-24gt4sfp-p_firmware"},{"vendor":"ruijie","product":"rg-s1930-24gt4sfp_firmware"},{"vendor":"ruijie","product":"rg-s1930-24t4sfp-p_firmware"},{"vendor":"ruijie","product":"rg-s1930-24t4sfp_firmware"},{"vendor":"ruijie","product":"rg-s1930-8gt2sfp-p_firmware"},{"vendor":"ruijie","product":"rg-s1930-8gt2sfp_firmware"},{"vendor":"ruijie","product":"rg-s1930-8t2sfp-p_firmware"},{"vendor":"ruijie","product":"rg-s1930-8t2sfp_firmware"},{"vendor":"ruijienetworks","product":"eap"},{"vendor":"ruijienetworks","product":"nbc"},{"vendor":"ruijienetworks","product":"rap"},{"vendor":"ruijienetworks","product":"rg-eg350"},{"vendor":"ruijienetworks","product":"rg-ew1200"},{"vendor":"ruijienetworks","product":"rg-s1930"}],"references":[{"url":"https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34644"},{"url":"https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389"},{"url":"https://github.com/advisories/GHSA-jprp-jh3h-3w7v"}],"sources":{"cve":[{"id":"CVE-2023-34644","description":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.","status":"published","published":"2023-07-31T00:00:00Z","modified":"2024-10-22T18:34:33.619Z","updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-38688","description":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.","status":"published","published":"2023-07-31T00:00:00Z","modified":"2024-10-22T18:34:33Z","updated_at":"2026-11-03T00:05:22.224445Z"}],"ghsa":[{"id":"GHSA-jprp-jh3h-3w7v","title":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0...","description":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows remote attackers to gain escalated privileges via crafted POST request to /cgi-bin/luci/api/auth.","status":"published","published":"2023-07-31T15:30:25Z","modified":"2024-05-14T15:33:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:57:20.80512Z"}],"nvd":[{"id":"CVE-2023-34644","description":"Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.","status":"published","published":"2023-07-31T14:15:10.323Z","modified":"2026-06-17T06:03:54.41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:08:18.687088Z"}]}}