CVE-2023-48849: Critical severity ruijie rg-eg1000c vulnerability
Published Dec 6, 2023
·Updated
Ruijie EG Series Routers version EG3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering.
Affected Software
42 affected components
All of the following
Ruijie Rg-eg1000c Firmware=3.0\(1\)b11p216
Ruijie Rg-eg1000c
All of the following
Ruijie Rg-eg1000e Firmware=3.0\(1\)b11p216
Ruijie Rg-eg1000e
All of the following
Ruijie Rg-eg105g Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105g
All of the following
Ruijie Rg-eg105g V2 Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105g V2
All of the following
Ruijie Rg-eg105g-e Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105g-e
All of the following
Ruijie Rg-eg105g-p Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105g-p
All of the following
Ruijie Rg-eg105g-pe Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105g-pe
All of the following
Ruijie Rg-eg105gw\(t\) Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105gw\(t\)
All of the following
Ruijie Rg-eg105gw-x Firmware=3.0\(1\)b11p216
Ruijie Rg-eg105gw-x
All of the following
Ruijie Rg-eg2000ce Firmware=3.0\(1\)b11p216
Ruijie Rg-eg2000ce
All of the following
Ruijie Rg-eg209gs Firmware=3.0\(1\)b11p216
Ruijie Rg-eg209gs
All of the following
Ruijie Rg-eg2100-p Firmware=3.0\(1\)b11p216
Ruijie Rg-eg2100-p
All of the following
Ruijie Rg-eg210g-e Firmware=3.0\(1\)b11p216
Ruijie Rg-eg210g-e
All of the following
Ruijie Rg-eg210g-p Firmware=3.0\(1\)b11p216
Ruijie Rg-eg210g-p
All of the following
Ruijie Rg-eg210g-pe Firmware=3.0\(1\)b11p216
Ruijie Rg-eg210g-pe
All of the following
Ruijie Rg-eg3000eu Firmware=3.0\(1\)b11p216
Ruijie Rg-eg3000eu
All of the following
Ruijie Rg-eg3000xe Firmware=3.0\(1\)b11p216
Ruijie Rg-eg3000xe
All of the following
Ruijie Rg-eg305gh-p-e Firmware=3.0\(1\)b11p216
Ruijie Rg-eg305gh-p-e
All of the following
Ruijie Rg-eg310gh-e Firmware=3.0\(1\)b11p216
Ruijie Rg-eg310gh-e
All of the following
Ruijie Rg-eg3230 Firmware=3.0\(1\)b11p216
Ruijie Rg-eg3230
All of the following
Ruijie Rg-eg3250 Firmware=3.0\(1\)b11p216
Ruijie Rg-eg3250
Event History
Dec 6, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48849?
CVE-2023-48849 is considered a critical vulnerability as it allows unauthenticated attackers to remotely execute arbitrary code.
2
How do I fix CVE-2023-48849?
To fix CVE-2023-48849, update the affected Ruijie EG Series Routers to version EG_3.0(1)B11P217 or later.
3
Which versions of Ruijie routers are affected by CVE-2023-48849?
CVE-2023-48849 affects Ruijie EG Series Routers running version EG_3.0(1)B11P216 and earlier.
4
Can CVE-2023-48849 be exploited remotely?
Yes, CVE-2023-48849 can be exploited remotely by unauthenticated attackers due to the lack of proper filtering.
5
What type of attacks can CVE-2023-48849 facilitate?
CVE-2023-48849 can facilitate arbitrary code execution attacks that may lead to full compromise of the affected devices.