CVE-2023-4169

A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/set_passwd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Ruijie Rg-Ew1200G

Ruijie rg-ew1200g Firmware

= 1.0\(1\)b1p5

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

49.2% (99th percentile)

Weakness

CWE-284

NVD status

Modified

Published

2023-08-05