CVE-2023-38902: Command Injection

Published Aug 17, 2023
·
Updated

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.0(1)B11P219, RG-EG series business VPN routers v.EG3.0(1)B11P219, EAP and RAP series wireless access points v.AP3.0(1)B11P219, and NBC series wireless controllers v.AC3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

Affected Software

192 affected components
Ruijie Rg-ew1200 Firmware=3.0\(1\)b11p219
Ruijie RG-EW1200
Ruijie Rg-ew1200g Pro Firmware=3.0\(1\)b11p219
Ruijie RG-EW1200G PRO
Ruijie Rg-ew1200r Firmware=3.0\(1\)b11p219
Ruijie Rg-ew1200r
Ruijie Rg-ew1300g Firmware=3.0\(1\)b11p219
Ruijie RG-EW1300G
Ruijie Rg-ew1800gx Pro Firmware=3.0\(1\)b11p219
Ruijie RG-EW1800GX PRO
Ruijie Rg-ew3000gx Pro Firmware=3.0\(1\)b11p219
Ruijie Rg-ew3000gx Pro
Ruijie Rg-ew300 Pro Firmware=3.0\(1\)b11p219
Ruijie Rg-ew300 Pro
Ruijie Rg-ew300r Firmware=3.0\(1\)b11p219
Ruijie Rg-ew300r
Ruijie Rg-ew3200gx Pro Firmware=3.0\(1\)b11p219
Ruijie Rg-ew3200gx Pro
Ruijie Rg-nb3200-24gt4xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nb3200-24gt4xs
Ruijie Rg-nbs1850gc Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs1850gc
Ruijie Rg-nbs1850gc V2 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs1850gc V2
Ruijie Rg-nbs2000 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs2000
Ruijie Rg-nbs2009g-p Firmware=3.0\(1\)b11p219
Ruijie RG-NBS2009G-P
Ruijie Rg-nbs200 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs200
Ruijie Rg-nbs2026g-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs2026g-p
Ruijie Rg-nbs2026g Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs2026g
Ruijie Rg-nbs226f Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs226f
Ruijie Rg-nbs228f Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs228f
Ruijie Rg-nbs252f Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs252f
Ruijie Rg-nbs3100-24gt4sfp-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-24gt4sfp-p
Ruijie Rg-nbs3100-24gt4sfp-p V2 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-24gt4sfp-p V2
Ruijie Rg-nbs3100-24gt4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-24gt4sfp
Ruijie Rg-nbs3100-48gt4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-48gt4sfp
Ruijie Rg-nbs3100-8gt2sfp-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-8gt2sfp-p
Ruijie Rg-nbs3100-8gt2sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3100-8gt2sfp
Ruijie Rg-nbs3200-24gt4xs-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3200-24gt4xs-p
Ruijie Rg-nbs3200-24sfp\/8gt4xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3200-24sfp\/8gt4xs
Ruijie Rg-nbs3200-48gt4xs-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3200-48gt4xs-p
Ruijie Rg-nbs3200-48gt4xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs3200-48gt4xs
Ruijie Rg-nbs5100-24gt4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5100-24gt4sfp
Ruijie Rg-nbs5100-48gt4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5100-48gt4sfp
Ruijie Rg-nbs5200-24gt4x Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5200-24gt4x
Ruijie Rg-nbs5200-24sfp\/8gt4xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5200-24sfp\/8gt4xs
Ruijie Rg-nbs5200-48gt4xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5200-48gt4xs
Ruijie Rg-nbs5300-48mg6xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5300-48mg6xs
Ruijie Rg-nbs5528xg Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5528xg
Ruijie Rg-nbs5552xg Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5552xg
Ruijie Rg-nbs5552xg V2.0 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5552xg V2.0
Ruijie Rg-nbs5628xg Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5628xg
Ruijie Rg-nbs5652xg Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5652xg
Ruijie Rg-nbs5710-24gt4sfp-e-p Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5710-24gt4sfp-e-p
Ruijie Rg-nbs5710-24gt4sfp-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5710-24gt4sfp-e
Ruijie Rg-nbs5710-48gt4sfp-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5710-48gt4sfp-e
Ruijie Rg-nbs5750-28gt4xs-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5750-28gt4xs-e
Ruijie Rg-nbs5750v2-24gt4xs-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5750v2-24gt4xs-e
Ruijie Rg-nbs5750v2-24sfp4xs-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5750v2-24sfp4xs-e
Ruijie Rg-nbs5750v2-48gt4xs-e Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5750v2-48gt4xs-e
Ruijie Rg-nbs5816xs Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs5816xs
Ruijie Rg-nbs6002 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs6002
Ruijie Rg-nbs6100-20xs4vs2qxs-s Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs6100-20xs4vs2qxs-s
Ruijie Rg-nbs7003 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs7003
Ruijie Rg-nbs7006 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbs7006
Ruijie Rg-s1930-24gt4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-24gt4sfp
Ruijie Rg-s1930-24t4sfp-p Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-24t4sfp-p
Ruijie Rg-s1930-24t4sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-24t4sfp
Ruijie Rg-s1930-8gt2sfp-p Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-8gt2sfp-p
Ruijie Rg-s1930-8gt2sfp Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-8gt2sfp
Ruijie Rg-s1930-8t2sfp-p Firmware=3.0\(1\)b11p219
Ruijie Rg-s1930-8t2sfp-p
Ruijie Rg-eg210g-pe Firmware=3.0\(1\)b11p219
Ruijie Rg-eg210g-pe
Ruijie Rg-eg210g-e Firmware=3.0\(1\)b11p219
Ruijie Rg-eg210g-e
Ruijie Rg-eg105g-pe Firmware=3.0\(1\)b11p219
Ruijie Rg-eg105g-pe
Ruijie Rg-eg105g-e Firmware=3.0\(1\)b11p219
Ruijie Rg-eg105g-e
Ruijie Rg-eg105g V2 Firmware=3.0\(1\)b11p219
Ruijie Rg-eg105g V2
Ruijie Rg-eg210g-p Firmware=3.0\(1\)b11p219
Ruijie Rg-eg210g-p
Ruijie Rg-rap1260\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap1260\(g\)
Ruijie Rg-rap1200\(e\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap1200\(e\)
Ruijie Rg-rap1200\(f\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap1200\(f\)
Ruijie Rg-rap120v2 Firmware=3.0\(1\)b11p219
Ruijie Rg-rap120v2
Ruijie Rg-rap100 Firmware=3.0\(1\)b11p219
Ruijie Rg-rap100
Ruijie Rg-rap120 Firmware=3.0\(1\)b11p219
Ruijie Rg-rap120
Ruijie Rg-rap6260\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap6260\(g\)
Ruijie Rg-rap2260\(e\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap2260\(e\)
Ruijie Rg-rap2260\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap2260\(g\)
Ruijie Rg-rap2200\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap2200\(g\)
Ruijie Rg-rap2200\(e\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap2200\(e\)
Ruijie Rg-rap2200\(f\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap2200\(f\)
Ruijie Rg-eap101 V2 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap101 V2
Ruijie Rg-eap102 V2 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap102 V2
Ruijie Rg-eap162\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap162\(g\)
Ruijie Rg-eap102\(f\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap102\(f\)
Ruijie Rg-eap102 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap102
Ruijie Rg-eap101 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap101
Ruijie Rg-rap630ioda Firmware=3.0\(1\)b11p219
Ruijie Rg-rap630ioda
Ruijie Rg-rap630cd Firmware=3.0\(1\)b11p219
Ruijie Rg-rap630cd
Ruijie Rg-rap6261\(e\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap6261\(e\)
Ruijie Rg-rap6261\(cd\) Firmware=3.0\(1\)b11p219
Ruijie Rg-rap6261\(cd\)
Ruijie Rg-eap262\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap262\(g\)
Ruijie Rg-eap212\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap212\(g\)
Ruijie Rg-eap212\(f\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap212\(f\)
Ruijie Rg-eap202 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap202
Ruijie Rg-eap201 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap201
Ruijie Rg-eap602 Firmware=3.0\(1\)b11p219
Ruijie Rg-eap602
Ruijie Rg-eap662\(g\) Firmware=3.0\(1\)b11p219
Ruijie Rg-eap662\(g\)
Ruijie Rg-nbc256 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbc256
Ruijie Rg-nbc512 Firmware=3.0\(1\)b11p219
Ruijie Rg-nbc512

Event History

Aug 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-38902?

CVE-2023-38902 has been classified as a high-severity command injection vulnerability.

2

How do I fix CVE-2023-38902?

To fix CVE-2023-38902, update your affected Ruijie devices to the latest firmware version that addresses this vulnerability.

3

What devices are affected by CVE-2023-38902?

CVE-2023-38902 affects various Ruijie devices including RG-EW series routers, RG-NBS and RG-S1930 switches, RG-EG business VPN routers, and EAP series access points running specific firmware versions.

4

Can CVE-2023-38902 be exploited remotely?

Yes, CVE-2023-38902 can be exploited remotely by an attacker with access to the affected device.

5

What are the potential impacts of exploiting CVE-2023-38902?

Exploiting CVE-2023-38902 could allow an attacker to execute arbitrary commands on the vulnerable device, compromising its security.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203