CVE-2020-36870 Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG1000C
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000F
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000K
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000L
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000CE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000SE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000GE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000XE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2000UE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000CE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000SE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000GE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000ME
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000UE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG3000XE
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: RG-EG2100-P
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: EG3210
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: EG3220
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: EG3230
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: EG3250
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR108G-P
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR1000G-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR1300G-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR1700G-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR2100G-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR2500D-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR3000D-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR6120-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR6135-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR6205-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR6210-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR6215-E
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR800G
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR950G
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR1000G-C
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR2000G-C
default_status: unaffected
vendor: Beijing Star-Net Ruijie Network Technology Co., Ltd.
product: NBR3000G-S
default_status: unaffected
Published: 2025-11-07T21:52:55.227Z