ruijie.com
http://ruijie.com/ CVE-2021-43163
CRITICAL
ruijienetworks reyeeos Improper Neutralization of Special Elements used in a Command ('Command Injection')
Record summary
CVE-2021-43163 has a selected CVSS score of 9.8 (critical).
Description
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Dec 5, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
| VulnCheck | Version data not supplied | ||
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-43163 seclists.org
https://seclists.org/fulldisclosure/2022/May/0