ruijie Vulnerability Advisory Catalog

Total 91 security vulnerabilities recorded for ruijie software and firmware.

← Back to All Vendors
Component: x30_pro_firmware

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request t...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: x30_pro_firmware

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request t...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew300t_firmware

OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST reques...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew1800gx_firmware

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew1200g_pro_firmware

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands vi...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: m18-ew_firmware

OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST req...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-bcr860_firmware

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the actio...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-bcr600w_firmware

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew1200_firmware

OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary command...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew1200_firmware

OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary command...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-yst250f_firmware

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a craf...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-yst250f_firmware

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request t...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-bcr600w_firmware

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the chec...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ew1300g_firmware

OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST ...

📅 2025-12-11
CVSS 8.8 Dossier →
Component: rg-ap720-l_firmware

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as roo...

📅 2025-12-08
CVSS 7.2 Dossier →
CVE-2025-56752 CRITICAL
Component: rg-es228gs-p_firmware

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providi...

📅 2025-09-03
CVSS 9.4 Dossier →
CVE-2025-9424 MEDIUM
Component: ws7204-a_firmware

A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality of the file /itbox_pi/branch_...

📅 2025-08-25
CVSS 4.7 Dossier →
Component: rg-nbr2600s_firmware

Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration o...

📅 2025-02-11
CVSS 5.1 Dossier →
CVE-2024-42936 CRITICAL
Component: reyee_os

The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT br...

📅 2025-01-21
CVSS 9.8 Dossier →
Component: nbr3000d-e_firmware

An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component....

📅 2024-10-15
CVSS 7.5 Dossier →
CVE-2024-24117 CRITICAL
Component: rg-nbs2009g-p_firmware

Insecure Permissions vulnerability in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release (9736) allows a remote attacker to gain privileges via the login c...

📅 2024-10-02
CVSS 9.8 Dossier →
CVE-2024-24116 CRITICAL
Component: rg-nbs2009g-p_firmware

An issue in Ruijie RG-NBS2009G-P RGOS v.10.4(1)P2 Release(9736) allows a remote attacker to gain privileges via the system/config_menu.htm....

📅 2024-10-02
CVSS 9.8 Dossier →
CVE-2024-8166 MEDIUM
Component: eg2000k_firmware

A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index...

📅 2024-08-26
CVSS 4.7 Dossier →
Component: eg-2000se_firmware

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login...

📅 2024-07-16
CVSS 8.4 Dossier →
Page 2 of 4 (91 Total Records)