VYPR

Vendor CVEs

Ruijie Networks

All CVEs

126 total · sorted by risk
  • CVE-2023-3450MedJun 28, 2023
    risk 0.35cvss 4.7epss 0.50

    A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been…

  • CVE-2025-25527MedFeb 11, 2025
    risk 0.33cvss 5.1epss 0.00

    Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or…

  • CVE-2025-9424MedAug 25, 2025
    risk 0.32cvss 4.7epss 0.18

    A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality of the file /itbox_pi/branch_import.php?a=branch_list. Such manipulation of the argument province leads to os command injection. The attack can be executed…

  • CVE-2024-6269MedJun 23, 2024
    risk 0.32cvss 4.7epss 0.21

    A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument indevice leads to…

  • CVE-2025-11141MedSep 29, 2025
    risk 0.31cvss 4.7epss 0.04

    A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itbox_pi/branch_passw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be…

  • CVE-2025-10774MedSep 22, 2025
    risk 0.31cvss 4.7epss 0.04

    A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view/vpn/autovpn/sub_commit.php. This manipulation of the argument key causes os command injection. It is possible to initiate the attack remotely. The exploit has…

  • CVE-2024-8166MedAug 26, 2024
    risk 0.31cvss 4.7epss 0.01

    A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated…

  • CVE-2024-5340MedMay 25, 2024
    risk 0.31cvss 4.7epss 0.08

    A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack may be…

  • CVE-2024-5339MedMay 25, 2024
    risk 0.31cvss 4.7epss 0.08

    A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/vpn/autovpn/online_check.php. The manipulation of the argument peernode leads to os command injection. The…

  • CVE-2024-5338MedMay 25, 2024
    risk 0.31cvss 4.7epss 0.08

    A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been classified as critical. Affected is an unknown function of the file /view/vpn/autovpn/online.php. The manipulation of the argument peernode leads to os command injection. It is possible to launch the attack…

  • CVE-2024-5337MedMay 25, 2024
    risk 0.31cvss 4.7epss 0.09

    A vulnerability was found in Ruijie RG-UAC up to 20240516 and classified as critical. This issue affects some unknown processing of the file /view/systemConfig/sys_user/user_commit.php. The manipulation of the argument email2/user_name leads to os command injection. The attack…

  • CVE-2024-5336MedMay 25, 2024
    risk 0.31cvss 4.7epss 0.09

    A vulnerability has been found in Ruijie RG-UAC up to 20240516 and classified as critical. This vulnerability affects the function addVlan of the file /view/networkConfig/vlan/vlan_add_commit.php. The manipulation of the argument phyport leads to os command injection. The attack…

  • CVE-2024-4510MedMay 6, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arp_add_commit.php. The manipulation of the argument text_ip_addr/text_mac_addr leads to os…

  • CVE-2024-4509MedMay 6, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/add_commit.php. The manipulation of the argument ip_addr/mac_addr leads to os command…

  • CVE-2024-4508MedMay 6, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/static_route_edit_ipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command…

  • CVE-2024-4507MedMay 6, 2024
    risk 0.31cvss 4.7epss 0.08

    A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/static_route_add_ipv6.php. The manipulation of the argument text_prefixlen/text_gateway/devname leads to os…

  • CVE-2024-4506MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.08

    A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command…

  • CVE-2024-4505MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ip_addr_add_commit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to…

  • CVE-2024-4504MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads to os command…

  • CVE-2024-4503MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os command injection.…

  • CVE-2024-4502MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcp_client_commit.php. The manipulation of the argument ifName leads to os command injection. It is possible to launch the…

  • CVE-2024-4501MedMay 5, 2024
    risk 0.31cvss 4.7epss 0.07

    A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be…

  • CVE-2024-4255MedApr 27, 2024
    risk 0.31cvss 4.7epss 0.05

    A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/gre_edit_commit.php. The manipulation of the argument name leads to os command injection. The attack…

  • CVE-2023-3608MedJul 10, 2023
    risk 0.31cvss 4.7epss 0.12

    A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to…

  • CVE-2025-8763LowAug 9, 2025
    risk 0.24cvss 3.7epss 0.00

    A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. It has been rated as problematic. This issue affects some unknown processing of the file /etc/strongswan.conf of the component strongSwan. The manipulation of the argument i_dont_care_about_security_and_use_aggressive_mod…

  • CVE-2026-14736HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely.…

Page 3 of 3