Vulnerability Details CVE-2023-27796
RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.7%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-27796
-
cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-
-
cpe:2.3:h:ruijienetworks:rg-ew1800gx_pro:-
-
cpe:2.3:h:ruijienetworks:rg-ew3200gx_pro:-
-
cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0(1)b11p204
-
cpe:2.3:o:ruijienetworks:rg-ew1800gx_pro_firmware:ew_3.0(1)b11p204
-
cpe:2.3:o:ruijienetworks:rg-ew3200gx_pro_firmware:ew_3.0(1)b11p204