Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG1000C | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000F | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000K | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000L | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000CE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000SE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000GE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000XE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000UE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000CE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000SE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000GE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000ME | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000UE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000XE | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2100-P | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3210 | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3220 | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3230 | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3250 | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR108G-P | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1000G-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1300G-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1700G-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2100G-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2500D-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR3000D-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6120-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6135-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6205-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6210-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6215-E | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR800G | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR950G | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1000G-C | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2000G-C | unaffected |
|
||||||
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR3000G-S | unaffected |
|
No data.
No data.
| Vendor | Product | Versions |
|---|---|---|
| Ruijie | Eg3210 | — |
| Ruijie | Eg3220 | — |
| Ruijie | Eg3230 | — |
| Ruijie | Eg3250 | — |
| Ruijie | Nbr1000g-c | — |
| Ruijie | Nbr1000g-e | — |
| Ruijie | Nbr108g-p | — |
| Ruijie | Nbr1300g-e | — |
| Ruijie | Nbr1700g-e | — |
| Ruijie | Nbr2000g-c | — |
| Ruijie | Nbr2100g-e | — |
| Ruijie | Nbr2500d-e | — |
| Ruijie | Nbr3000d-e | — |
| Ruijie | Nbr3000g-s | — |
| Ruijie | Nbr6120-e | — |
| Ruijie | Nbr6135-e | — |
| Ruijie | Nbr6205-e | — |
| Ruijie | Nbr6210-e | — |
| Ruijie | Nbr6215-e | — |
| Ruijie | Nbr800g | — |
| Ruijie | Nbr950g | — |
| Ruijie | Rg-eg1000c | — |
| Ruijie | Rg-eg2000ce | — |
| Ruijie | Rg-eg2000f | — |
| Ruijie | Rg-eg2000ge | — |
| Ruijie | Rg-eg2000k | — |
| Ruijie | Rg-eg2000l | — |
| Ruijie | Rg-eg2000se | — |
| Ruijie | Rg-eg2000ue | — |
| Ruijie | Rg-eg2000xe | — |
| Ruijie | Rg-eg2100-p | — |
| Ruijie | Rg-eg3000ce | — |
| Ruijie | Rg-eg3000ge | — |
| Ruijie | Rg-eg3000me | — |
| Ruijie | Rg-eg3000se | — |
| Ruijie | Rg-eg3000ue | — |
| Ruijie | Rg-eg3000xe | — |
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.620% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-06-07 UTC. | Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC. |
| First Time appeared |
Ruijie rg-eg3230
Ruijie rg-eg3250 Ruijie rg-nbr6120-e Ruijie rg-nbr6205-e Ruijie rg-nbr6210-e Ruijie rg-nbr6215-e Ruijienetworks Ruijienetworks rg-nbr2100g-e |
|
| CPEs | cpe:2.3:h:ruijie:eg3210:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:eg3220:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr1000g-c:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr1000g-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr108g-p:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr1300g-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr1700g-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr2000g-c:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr2500d-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr3000d-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr3000g-s:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr6135-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr800g:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:nbr950g:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg1000c:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000ce:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000f:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000ge:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000k:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000l:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000se:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000ue:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2000xe:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg2100-p:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000ce:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000ge:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000me:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000se:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000ue:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3000xe:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3230:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-eg3250:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-nbr6120-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-nbr6205-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-nbr6210-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijie:rg-nbr6215-e:*:*:*:*:*:*:*:* cpe:2.3:h:ruijienetworks:rg-nbr2100g-e:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ruijie rg-eg3230
Ruijie rg-eg3250 Ruijie rg-nbr6120-e Ruijie rg-nbr6205-e Ruijie rg-nbr6210-e Ruijie rg-nbr6215-e Ruijienetworks Ruijienetworks rg-nbr2100g-e |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ruijie
Ruijie eg3210 Ruijie eg3220 Ruijie eg3230 Ruijie eg3250 Ruijie nbr1000g-c Ruijie nbr1000g-e Ruijie nbr108g-p Ruijie nbr1300g-e Ruijie nbr1700g-e Ruijie nbr2000g-c Ruijie nbr2100g-e Ruijie nbr2500d-e Ruijie nbr3000d-e Ruijie nbr3000g-s Ruijie nbr6120-e Ruijie nbr6135-e Ruijie nbr6205-e Ruijie nbr6210-e Ruijie nbr6215-e Ruijie nbr800g Ruijie nbr950g Ruijie rg-eg1000c Ruijie rg-eg2000ce Ruijie rg-eg2000f Ruijie rg-eg2000ge Ruijie rg-eg2000k Ruijie rg-eg2000l Ruijie rg-eg2000se Ruijie rg-eg2000ue Ruijie rg-eg2000xe Ruijie rg-eg2100-p Ruijie rg-eg3000ce Ruijie rg-eg3000ge Ruijie rg-eg3000me Ruijie rg-eg3000se Ruijie rg-eg3000ue Ruijie rg-eg3000xe |
|
| Vendors & Products |
Ruijie
Ruijie eg3210 Ruijie eg3220 Ruijie eg3230 Ruijie eg3250 Ruijie nbr1000g-c Ruijie nbr1000g-e Ruijie nbr108g-p Ruijie nbr1300g-e Ruijie nbr1700g-e Ruijie nbr2000g-c Ruijie nbr2100g-e Ruijie nbr2500d-e Ruijie nbr3000d-e Ruijie nbr3000g-s Ruijie nbr6120-e Ruijie nbr6135-e Ruijie nbr6205-e Ruijie nbr6210-e Ruijie nbr6215-e Ruijie nbr800g Ruijie nbr950g Ruijie rg-eg1000c Ruijie rg-eg2000ce Ruijie rg-eg2000f Ruijie rg-eg2000ge Ruijie rg-eg2000k Ruijie rg-eg2000l Ruijie rg-eg2000se Ruijie rg-eg2000ue Ruijie rg-eg2000xe Ruijie rg-eg2100-p Ruijie rg-eg3000ce Ruijie rg-eg3000ge Ruijie rg-eg3000me Ruijie rg-eg3000se Ruijie rg-eg3000ue Ruijie rg-eg3000xe |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-06-07 UTC. | |
| Title | Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE | |
| Weaknesses | CWE-94 | |
| References |
| |
| Metrics |
cvssV4_0
|