CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.04% chance of exploitation in the next 30 days, 62th percentile

Published

2023-03-26

Updated

2025-02-20

Proof-of-concept exploits (1)

• winmt/my-vuls/tree/main/RG-EW1200

References

• CVE Record
• NVD entry

Related

• CVE-2023-26801
• CVE-2023-26802
• CVE-2023-27796
• CVE-2023-26793
• CVE-2023-2678
• CVE-2023-26773