CVE-2023-3450: Ruijie RG-BCR860 Network Diagnostic Page os command injection

Published Jun 28, 2023

Updated

A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232547. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

4 affected components

All of the following

Ruijie RG-BCR860

Ruijie Rg-bcr860 Firmware=2.5.13

Ruijie RG-BCR860

Event History

Jun 28, 2023

CVE Published

06:00 PM

Data Sourced

06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3450?

The severity of CVE-2023-3450 is high with a CVSS score of 7.2.

How does CVE-2023-3450 affect Ruijie RG-BCR860?

CVE-2023-3450 affects Ruijie RG-BCR860 version 2.5.13.

What is the vulnerability type of CVE-2023-3450?

CVE-2023-3450 is a command injection vulnerability.

Can CVE-2023-3450 be exploited remotely?

Yes, CVE-2023-3450 can be exploited remotely.

Is there a fix available for CVE-2023-3450?

It is recommended to update Ruijie RG-BCR860 firmware to version 2.5.14 or later to fix CVE-2023-3450.