CVE-2023-4415

HIGHNuclei

Ruijie RG-EW1200G login improper authentication

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-4415 has a selected CVSS score of 7.3 (high); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

RG-EW1200G

Browse Ruijie / RG-EW1200G
CVE List07161417 r483affected

Proofs of concept

1

Repository PoCs

GitHubthedarknessdied/CVE-2023-4169_CVE-2023-3306_CVE-2023-4415Repository PoCby thedarknessdied29Not analyzed5 files

20.1 KiB · linked to 3 vulnerabilities

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHRuijie RG-EW1200G Router Background - Login BypassCVSS 8.8

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability.

Impact

Attackers can bypass authentication on the Ruijie RG-EW1200G router through improper authentication checks in the login API, potentially gaining administrative access to the router and compromising network security.

Remediation

Update Ruijie RG-EW1200G firmware to a version newer than 07161417 r483 that implements proper authentication validation in the login API.

WeaknessesCWE-287
AuthorsDhiyaneshDK
Template tagscve2023cveruijierouterruijienetworksvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:o:ruijienetworks:rg-ew1200g_firmware:07161417_r483:*:*:*:*:*:*:*
Shodan: http.html:"app.2fe6356cdd1ddd0eb8d6317d1a48d379.css"
FOFA: body="app.2fe6356cdd1ddd0eb8d6317d1a48d379.css"
https://nvd.nist.gov/vuln/detail/CVE-2023-4415 https://github.com/blakespire/repoforcve/tree/main/RG-EW1200G-logic https://vuldb.com/?ctiid.237518 https://vuldb.com/?id.237518 https://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415

Source: ProjectDiscovery

References

4