Ruijienetworks

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-53881 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 15, 2025 9.2 CRITICAL· v4 8.1 HIGH· v3 N/A· v2 ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP serv...Show more ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary commands on Ruijie Reyee Cloud devices by exploiting the unprotected HTTP polling requests.Show less
CVE-2025-56077 2Ruijie Ruijienetworks 2Reyee Os Rg Rap2200(e) Firmware Jun 17, 2026 Dec 11, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2024-52324 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 9.2 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.
CVE-2024-48874 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal s...Show more Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services.Show less
CVE-2024-47791 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 8.7 HIGH· v4 5.3 MEDIUM· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to subscribe to partial possible topics in Ruijie MQTT broker, and receive partial messages being sent to and from devices.
CVE-2024-47146 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 7.1 HIGH· v4 6.5 MEDIUM· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal.
CVE-2024-46874 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 9.2 CRITICAL· v4 9.9 CRITICAL· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to othe...Show more Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud.Show less
CVE-2024-45722 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an attacker to easily calculate MQTT credentials.
CVE-2024-51727 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 7.1 HIGH· v4 7.5 HIGH· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a feature that could enable attackers to invalidate a legitimate user's session and cause a denial-of-service attack on a user's account.
CVE-2024-47547 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vulnerable to brute force attacks.
CVE-2024-47043 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 8.7 HIGH· v4 5.3 MEDIUM· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address.
CVE-2024-42494 1Ruijienetworks 1Reyee Os Jun 17, 2026 Dec 6, 2024 7.1 HIGH· v4 7.5 HIGH· v3 N/A· v2 Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie'...Show more Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's servicesShow less
CVE-2023-4415 1Ruijienetworks 1Rg Ew1200g Firmware Jun 17, 2026 Aug 18, 2023 N/A· v4 8.8 HIGH· v3 7.5 HIGH· v2 A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authenticat...Show more A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-3608 1Ruijienetworks 1Bcr810w Firmware Jun 17, 2026 Jul 10, 2023 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may...Show more A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233477 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2023-27796 1Ruijienetworks 3Rg Ew1200g Pro Firmware Rg Ew1800gx Pro FirmwareRg Ew3200gx Pro Firmware Jun 17, 2026 Mar 26, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabili...Show more RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua.Show less
CVE-2023-26800 1Ruijienetworks 3Rg Ew1200 Firmware Rg Ew1200g Pro FirmwareRg Ew1200r Firmware Jun 17, 2026 Mar 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.
CVE-2022-33128 1Ruijienetworks 1Rg Eg350 Firmware Jun 17, 2026 Jun 25, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /alarm_pi/alarmService.php.
CVE-2021-43164 1Ruijienetworks 1Reyeeos Jul 9, 2026 May 4, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.
CVE-2021-43163 1Ruijienetworks 1Reyeeos Jul 9, 2026 May 4, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.
CVE-2021-43162 1Ruijienetworks 1Reyeeos Jul 9, 2026 May 4, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose.

12 Next