CVE-2021-43161
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch. An attacker can send a crafted request to execute arbitrary code on the device.
Risk Assessment
The risk for the organization includes full compromise of the router, potentially leading to network confidentiality and integrity breaches, as well as using the device as an entry point for further attacks.
Recommendation
It is recommended to immediately update the router firmware to the latest version that fixes this vulnerability and restrict management interface access to trusted IP addresses only.
Other vulnerabilities in Ruijie ReyeeOS
See all- CVE-2021-43164High
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless. An attacker can exploit this flaw to gain unauthorized control over the device.
- CVE-2021-43163Critical
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55. The flaw is located in the checkNet function within /cgi-bin/luci/api/auth.
- CVE-2021-43160High
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW series routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose. An attacker can send a crafted request to execute arbitrary code on the device.
Original NVD description (English source)
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch.