CVE-2023-38902: Ruijie Rg-EAP101 Firmware

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

Affected products

  • Ruijie Rg-EAP101 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP101 v2 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP102(F) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP102 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP102 v2 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP162(G) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP201 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP202 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP212(F) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP212(G) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP262(G) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP602 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EAP662(G) Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG105G-E Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG105G-Pe Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG105G v2 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG210G-E Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG210G-P Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EG210G-Pe Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW1200 Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW1200G Pro Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW1200R Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW1300G Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW1800GX Pro Firmware: version 3.0(1)b11p219 only
  • Ruijie Rg-EW3000GX Pro Firmware: version 3.0(1)b11p219 only
  • and 71 more

Published 2023-08-17. Last modified 2026-06-17.