CVE-2023-34644

CVSS Score of 10 (low)

Details

Published Jul 31, 2023
Updated: May 14, 2024
CWE ID 94

Summary

CVE-2023-34644 is a remote code execution vulnerability that affects Ruijie Networks products, including RG-EW series home routers and repeaters, RG-NBS and RG-S1930 series switches, RG-EG series business VPN routers, EAP and RAP series wireless access points, and NBC series wireless controllers. The vulnerability allows unauthorized remote attackers to gain the highest privileges by sending a crafted POST request to /cgi-bin/luci/api/auth. The risk score for this vulnerability is 65 out of 100, indicating a significant threat. To remediate the vulnerability, users should apply the necessary patches or updates provided by Ruijie Networks. If left unaddressed, this vulnerability poses a high danger to organizations as it could allow attackers to execute arbitrary code on affected devices and potentially gain control over the network infrastructure.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-34644 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options