CVE-2021-43163

Published: May 4, 2022Modified: Jul 9, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.

Affected (1)

Products: Ruijienetworks: Reyeeos

Ruijienetworks

1 product

Reyeeos

Configuration A

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Ruijienetworks Reyeeos	Up to 1.55.1915_ew_3.0\(1\)b11p55

Running on/with	Platform Versions
Ruijienetworks Rg Ew1200	All versions
Ruijienetworks Rg Ew1200g Pro	All versions
Ruijienetworks Rg Ew1800gx Pro	All versions
Ruijienetworks Rg Ew300 Pro	All versions
Ruijienetworks Rg Ew3200gx Pro	All versions

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

https://seclists.org/fulldisclosure/2022/May/0

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/fulldisclosure/2022/May/0

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.