Ruijienetworks vulnerabilities
We track 9 vulnerabilities in Ruijienetworks products across 17 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
Latest Ruijienetworks vulnerabilities
- 8.1 High severity
ReyeeOS: Cleartext Transmission of Sensitive Information
ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack. Attackers can create a fake CWMP server to inject and execute arbitrary comma
- 8.8 High severity
Reyee OS: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
- 8.8 High severity
rg-rsr10-01g-t: Improper Filtering of Special Elements
An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) allows attackers to execute arbitrary code via the common_quick_config.lua file.
- 8.8 High severity
RG-EW1200G: Improper Authentication
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely
- 9.8 Critical severity
rg-ew1200: Improper Control of Generation of Code
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless
- 8.8 High severity
BCR810W: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has b
- 8.8 High severity
Rg-ew1800gx Pro Firmware: Improper Neutralization of Special Elements used in a Command
RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, dat
- 9.8 Critical severity
Rg-ew1200r Firmware: Improper Neutralization of Special Elements used in a Command
Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.
- 9.1 Critical severity
Rg-eg350 Firmware: Improper Neutralization of Special Elements used in an SQL Command
RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /alarm_pi/alarmService.php.