Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

Vendors Products
Ruijie
  • Eg3210
  • Eg3220
  • Eg3230
  • Eg3250
  • Nbr1000g-c
  • Nbr1000g-e
  • Nbr108g-p
  • Nbr1300g-e
  • Nbr1700g-e
  • Nbr2000g-c
  • Nbr2100g-e
  • Nbr2500d-e
  • Nbr3000d-e
  • Nbr3000g-s
  • Nbr6120-e
  • Nbr6135-e
  • Nbr6205-e
  • Nbr6210-e
  • Nbr6215-e
  • Nbr800g
  • Nbr950g
  • Rg-eg1000c
  • Rg-eg2000ce
  • Rg-eg2000f
  • Rg-eg2000ge
  • Rg-eg2000k
  • Rg-eg2000l
  • Rg-eg2000se
  • Rg-eg2000ue
  • Rg-eg2000xe
  • Rg-eg2100-p
  • Rg-eg3000ce
  • Rg-eg3000ge
  • Rg-eg3000me
  • Rg-eg3000se
  • Rg-eg3000ue
  • Rg-eg3000xe
  • Rg-eg3230
  • Rg-eg3250
  • Rg-nbr6120-e
  • Rg-nbr6205-e
  • Rg-nbr6210-e
  • Rg-nbr6215-e
Ruijienetworks
  • Rg-nbr2100g-e

No data.

No data.

References
Link Providers
https://www.cnvd.org.cn/flaw/show/CNVD-2021-09650 cve-icon cve-icon
https://www.ruijie.com.cn/gy/xw-aqtg-gw/86747/ cve-icon cve-icon
https://www.ruijie.com.cn/gy/xw-aqtg-zw/85638/ cve-icon cve-icon
https://www.vulncheck.com/advisories/ruijie-networks-eg-and-nbr-series-routers-rce cve-icon cve-icon
History

Thu, 20 Nov 2025 21:45:00 +0000

Type Values Removed Values Added
Description Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-06-07 UTC. Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
First Time appeared Ruijie rg-eg3230
Ruijie rg-eg3250
Ruijie rg-nbr6120-e
Ruijie rg-nbr6205-e
Ruijie rg-nbr6210-e
Ruijie rg-nbr6215-e
Ruijienetworks
Ruijienetworks rg-nbr2100g-e
CPEs cpe:2.3:h:ruijie:eg3210:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:eg3220:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr1000g-c:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr1000g-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr108g-p:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr1300g-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr1700g-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr2000g-c:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr2500d-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr3000d-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr3000g-s:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr6135-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr800g:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr950g:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg1000c:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000ce:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000f:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000ge:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000k:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000l:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000se:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000ue:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2000xe:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg2100-p:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000ce:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000ge:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000me:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000se:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000ue:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3000xe:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3230:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-eg3250:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr6120-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr6205-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr6210-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr6215-e:*:*:*:*:*:*:*:*
cpe:2.3:h:ruijienetworks:rg-nbr2100g-e:*:*:*:*:*:*:*:*
Vendors & Products Ruijie rg-eg3230
Ruijie rg-eg3250
Ruijie rg-nbr6120-e
Ruijie rg-nbr6205-e
Ruijie rg-nbr6210-e
Ruijie rg-nbr6215-e
Ruijienetworks
Ruijienetworks rg-nbr2100g-e

Thu, 13 Nov 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 10 Nov 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Ruijie
Ruijie eg3210
Ruijie eg3220
Ruijie eg3230
Ruijie eg3250
Ruijie nbr1000g-c
Ruijie nbr1000g-e
Ruijie nbr108g-p
Ruijie nbr1300g-e
Ruijie nbr1700g-e
Ruijie nbr2000g-c
Ruijie nbr2100g-e
Ruijie nbr2500d-e
Ruijie nbr3000d-e
Ruijie nbr3000g-s
Ruijie nbr6120-e
Ruijie nbr6135-e
Ruijie nbr6205-e
Ruijie nbr6210-e
Ruijie nbr6215-e
Ruijie nbr800g
Ruijie nbr950g
Ruijie rg-eg1000c
Ruijie rg-eg2000ce
Ruijie rg-eg2000f
Ruijie rg-eg2000ge
Ruijie rg-eg2000k
Ruijie rg-eg2000l
Ruijie rg-eg2000se
Ruijie rg-eg2000ue
Ruijie rg-eg2000xe
Ruijie rg-eg2100-p
Ruijie rg-eg3000ce
Ruijie rg-eg3000ge
Ruijie rg-eg3000me
Ruijie rg-eg3000se
Ruijie rg-eg3000ue
Ruijie rg-eg3000xe
Vendors & Products Ruijie
Ruijie eg3210
Ruijie eg3220
Ruijie eg3230
Ruijie eg3250
Ruijie nbr1000g-c
Ruijie nbr1000g-e
Ruijie nbr108g-p
Ruijie nbr1300g-e
Ruijie nbr1700g-e
Ruijie nbr2000g-c
Ruijie nbr2100g-e
Ruijie nbr2500d-e
Ruijie nbr3000d-e
Ruijie nbr3000g-s
Ruijie nbr6120-e
Ruijie nbr6135-e
Ruijie nbr6205-e
Ruijie nbr6210-e
Ruijie nbr6215-e
Ruijie nbr800g
Ruijie nbr950g
Ruijie rg-eg1000c
Ruijie rg-eg2000ce
Ruijie rg-eg2000f
Ruijie rg-eg2000ge
Ruijie rg-eg2000k
Ruijie rg-eg2000l
Ruijie rg-eg2000se
Ruijie rg-eg2000ue
Ruijie rg-eg2000xe
Ruijie rg-eg2100-p
Ruijie rg-eg3000ce
Ruijie rg-eg3000ge
Ruijie rg-eg3000me
Ruijie rg-eg3000se
Ruijie rg-eg3000ue
Ruijie rg-eg3000xe

Fri, 07 Nov 2025 22:00:00 +0000

Type Values Removed Values Added
Description Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-06-07 UTC.
Title Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Weaknesses CWE-94
References
Metrics cvssV4_0

{'score': 9.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published: 2025-11-07T21:52:55.227Z

Updated: 2025-11-20T21:32:27.504Z

Reserved: 2025-10-30T15:45:57.762Z

Link: CVE-2020-36870

cve-icon Vulnrichment

Updated: 2025-11-13T16:10:46.333Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-07T22:15:38.587

Modified: 2025-11-20T22:15:53.293

Link: CVE-2020-36870

cve-icon Redhat

No data.