CVE-2020-36870: Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36870?
CVE-2020-36870 is classified as a critical severity vulnerability due to its potential for code execution.
How do I fix CVE-2020-36870?
To fix CVE-2020-36870, upgrade the firmware of the affected Ruijie Gateway EG and NBR models to version 11.9(4)B12P1 or later.
What products are affected by CVE-2020-36870?
CVE-2020-36870 affects various Ruijie Gateway EG and NBR models running firmware versions between 11.1(6)B9P1 and 11.9(4)B12P1.
What type of vulnerability is CVE-2020-36870?
CVE-2020-36870 is a code execution vulnerability that can be exploited via the EWEB management system.
Can CVE-2020-36870 be exploited remotely?
Yes, CVE-2020-36870 can be exploited remotely through front-end functionality such as guest authentication.