CVE-2022-33128: Ruijienetworks Rg-EG350 Firmware

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /alarm_pi/alarmService.php.

Affected products

• Ruijienetworks Rg-EG350 Firmware: version eg_rgos_11.1(6) only

Published 2022-06-25. Last modified 2026-06-17.