CVE-2023-34644: Ruijie Re-EG1000M Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.

Affected products

  • Ruijie Re-EG1000M Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG1000C Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG1000E Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG105G-E Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG105G-P Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG105G Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG105GW(T) Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG105GW-X Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG2000CE Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG209GS Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG2100-P Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG210G-P Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG3000EU Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG3000XE Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG305GH-P-E Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG310GH-E Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG3230 Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EG3250 Firmware: version 3.0(1)b11p216 only
  • Ruijie Rg-EW1200 Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW1200G Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW1200R Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW1800GX Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW300 Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW300R Firmware: version 3.0(1)b11p204 only
  • Ruijie Rg-EW3200GX Firmware: version 3.0(1)b11p204 only
  • and 40 more

Published 2023-07-31. Last modified 2026-06-17.