Vulnerability Details CVE-2023-27796
RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.106
EPSS Ranking 92.6%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-27796
-
cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-
-
cpe:2.3:h:ruijienetworks:rg-ew1800gx_pro:-
-
cpe:2.3:h:ruijienetworks:rg-ew3200gx_pro:-
-
cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0(1)b11p204
-
cpe:2.3:o:ruijienetworks:rg-ew1800gx_pro_firmware:ew_3.0(1)b11p204
-
cpe:2.3:o:ruijienetworks:rg-ew3200gx_pro_firmware:ew_3.0(1)b11p204