Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Vulnerability Description
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
CVSS Information
N/A
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
Ruijie EG Series和Ruijie NBR Series 安全漏洞
Vulnerability Description
Ruijie EG Series和Ruijie NBR Series都是中国锐捷（Ruijie）公司的一系列下一代安全网关产品。 Ruijie EG Series和Ruijie NBR Series存在安全漏洞，该漏洞源于EWEB管理系统存在代码执行漏洞，可能导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A