CVE-2021-43164: OS Command Injection
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ruijie Networks Ruijie RG-EW Series Routers (ReyeeOS/EW_3.0)to a version that resolves this vulnerability.Fixed in ReyeeOS 1.55.1915 / EW_3.0(1)B11P55
Event History
Frequently Asked Questions
What is CVE-2021-43164?
CVE-2021-43164 is a Remote Code Execution (RCE) vulnerability in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55.
How severe is CVE-2021-43164?
CVE-2021-43164 has a severity score of 8.8 (high).
How does CVE-2021-43164 affect Ruijie Networks Ruijie RG-EW Series Routers?
CVE-2021-43164 affects Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55.
Is Ruijie Networks Ruijie RG-EW Series Router RG-EW1200 vulnerable to CVE-2021-43164?
No, Ruijie Networks Ruijie RG-EW Series Router RG-EW1200 is not vulnerable to CVE-2021-43164.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-43164?
The CWE ID for CVE-2021-43164 is 78.