EXPOSURES › CVE-2021-43163

CVE-2021-43163

CRITICAL

DETAIL

SourceNVD · cve Published2022-05-04 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-43163 ↗

⚡ RCE SHAME 50/100 rce

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

ruijienetworks · vendor reyeeos · product rg-ew1200 · product rg-ew1200g pro · product rg-ew1800gx pro · product rg-ew300 pro · product rg-ew3200gx pro · product

DESCRIPTION

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.