Ruijie ReyeeOS vulnerabilities
4 known CVE vulnerabilities in Ruijie ReyeeOS, translated and rated.
- CVE-2021-43164High
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless. An attacker can exploit this flaw to gain unauthorized control over the device.
- CVE-2021-43163Critical
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55. The flaw is located in the checkNet function within /cgi-bin/luci/api/auth.
- CVE-2021-43161High
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch. An attacker can send a crafted request to execute arbitrary code on the device.
- CVE-2021-43160High
A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW series routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose. An attacker can send a crafted request to execute arbitrary code on the device.