CVE-2021-43161: Command Injection
Published May 4, 2022
·Updated
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch.
Affected Software
12 affected components
Ruijienetworks Reyeeos<=1.55.1915_ew_3.0\(1\)b11p55
Ruijienetworks Rg-ew1200
Ruijienetworks Rg-ew1200g Pro
Ruijienetworks Rg-ew1800gx Pro
Ruijienetworks Rg-ew300 Pro
Ruijienetworks Rg-ew3200gx Pro
All of the following
Ruijienetworks Reyeeos<=1.55.1915_ew_3.0\(1\)b11p55
Any of the following
Ruijienetworks Rg-ew1200
Ruijienetworks Rg-ew1200g Pro
Ruijienetworks Rg-ew1800gx Pro
Ruijienetworks Rg-ew300 Pro
Ruijienetworks Rg-ew3200gx Pro
Event History
May 4, 2022
CVE Published
via MITRE·12:08 AM
Data Sourced
via MITRE·12:08 AM
Description
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-43161?
CVE-2021-43161 is a Remote Code Execution (RCE) vulnerability in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55.
2
How severe is CVE-2021-43161?
CVE-2021-43161 has a severity score of 8.8 (high).
3
How does CVE-2021-43161 impact Ruijie Networks Ruijie RG-EW Series Routers?
CVE-2021-43161 allows remote attackers to execute arbitrary code via the doSwitchApi function in /cgi-bin/luci/api/switch.
4
Which software versions are affected by CVE-2021-43161?
CVE-2021-43161 affects Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55.
5
Is Ruijie Networks Ruijie RG-EW1200 vulnerable to CVE-2021-43161?
No, Ruijie Networks Ruijie RG-EW1200 is not vulnerable to CVE-2021-43161.