CVE-2023-48849

Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering

published December 6, 2023

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

⚠️ An unexpected oversight could allow attackers to pull a fast one! Ruijie EG Series Routers up to version EG_3.0(1)B11P216 might just let malicious code slip through the cracks. 🤯 Think of it like a restaurant that forgot to check IDs at the door — anyone can walk in and place orders without verification, leading to all sorts of trouble in the kitchen! An attacker could remotely execute arbitrary code, diving into your network and potentially controlling devices like a puppeteer. This could lead to data breaches, unauthorized access, or even manipulation of sensitive configurations—definitely a recipe for disaster!

Put simply

Think of it like a restaurant that forgot to check IDs at the door — anyone can walk in and place orders without verification, leading to all sorts of trouble in the kitchen! This vulnerability arises from improper filtering, allowing unauthenticated users to send specially crafted requests that the router fails to sanitize, resulting in remote code execution.

What to do

An attacker could remotely execute arbitrary code, diving into your network and potentially controlling devices like a puppeteer. This could lead to data breaches, unauthorized access, or even manipulation of sensitive configurations—definitely a recipe for disaster! To protect yourself, update your Ruijie EG Series Routers to version EG_3.0(1)B11P217 or later as soon as possible. Additionally, review your network security policies to ensure no unauthorized access is allowed. Regular audits can help catch these kinds of issues early! You've got this! Stay vigilant, follow the steps, and you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01290 · 70.0th percentile
Published
2023-12-06T00:00Z
EPSS history
Timeline
  • 06 DEC 00:00Z
    Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering
    cvelistv5