« Volver al listado

CVE-2023-26800

Estado: ModificadaCrítica (9.8)—

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Ruijienetworks — Rg-ew1200 FirmwareRuijienetworks — Rg-ew1200g PRO FirmwareRuijienetworks — Rg-ew1200r Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-26800",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-26800",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-20T15:37:33.830435Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-03-26T21:15:06.967",
  "references": [
    {
      "url": "https://github.com/winmt/my-vuls/tree/main/RG-EW1200",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/winmt/my-vuls/tree/main/RG-EW1200",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function."
    }
  ],
  "lastModified": "2026-06-17T05:43:49.360",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ruijienetworks:rg-ew1200r_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5327E827-80E2-46AA-9383-3CD874B51FEA"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ruijienetworks:rg-ew1200r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "832C68AE-662E-4597-B0DF-9467078B6F01"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ruijienetworks:rg-ew1200_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC61FDAC-B299-42FA-BA81-CE95622BC0CF"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ruijienetworks:rg-ew1200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "693E2E30-5F81-49DD-8FA9-B88EB089B378"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0\\(1\\)b11p204:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "666DA117-2888-42E6-82A4-FE78087C41BD"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "727F7545-61FB-43F4-9A52-A613CE26B0ED"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}