Description
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000UE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000CE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000SE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000GE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000ME
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000UE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000XE
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2100-P
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3210
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3220
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3230
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3250
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR108G-P
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1300G-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1700G-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2100G-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2500D-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000D-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6120-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6135-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6205-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6210-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6215-E
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR800G
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR950G
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-C
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2000G-C
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected
Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000G-S
Default version status: unaffected
11.1(6)B9P1 to < 11.9(4)B12P1affected