CVE-2021-43164

HighCVSS 8.8

Published: 04/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

33.95%

98th percentile - higher than 98% of all known CVEs

Summary

A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless. An attacker can exploit this flaw to gain unauthorized control over the device.

Risk Assessment

The risk for the organization includes full compromise of the router, potentially leading to network traffic interception, data theft, or using the device as an entry point for further attacks on the internal network.

Recommendation

Immediately update the router firmware to the latest ReyeeOS version that addresses this vulnerability. If an update is not available, restrict management interface access to trusted IP addresses only.

Original NVD description (English source)

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless.