Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities by Ruijie Networks

    JVNDB-2026-000008

    Vulnerability from jvndb - Published: 2026-01-21 15:17 - Updated:2026-01-21 15:17
    Severity
    7.2 (High) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Summary
    Ruijie Networks AP180 series vulnerable to OS command injection
    Details
    AP180 series provided by Ruijie Networks Co., Ltd. contains the following vulnerability.
    • OS command injection (CWE-78) - CVE-2026-23699
    Thanh Do of BabyPhD reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000008.html",
  "dc:date": "2026-01-21T15:17+09:00",
  "dcterms:issued": "2026-01-21T15:17+09:00",
  "dcterms:modified": "2026-01-21T15:17+09:00",
  "description": "AP180 series provided by Ruijie Networks Co., Ltd. contains the following vulnerability.\u003cul\u003e\u003cli\u003eOS command injection (CWE-78) - CVE-2026-23699\u003c/li\u003e\u003c/ul\u003eThanh Do of BabyPhD reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000008.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:ap180",
      "@product": "AP180",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.2",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000008",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN86850670/index.html",
      "@id": "JVN#86850670",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-23699",
      "@id": "CVE-2026-23699",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    }
  ],
  "title": "Ruijie Networks AP180 series vulnerable to OS command injection"
}

    JVNDB-2025-022400

    Vulnerability from jvndb - Published: 2025-12-19 12:33 - Updated:2025-12-19 12:33
    Severity
    7.2 (High) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Summary
    Ruijie Networks AP180 Series vulnerable to OS command injection
    Details
    RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks contain the following vulnerability.
    • OS command injection (CWE-78) - CVE-2025-68459
    Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-022400.html",
  "dc:date": "2025-12-19T12:33+09:00",
  "dcterms:issued": "2025-12-19T12:33+09:00",
  "dcterms:modified": "2025-12-19T12:33+09:00",
  "description": "RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks contain the following vulnerability.\u003cul\u003e\u003cli\u003eOS command injection (CWE-78) - CVE-2025-68459\u003c/li\u003e\u003c/ul\u003eChuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-022400.html",
  "sec:cpe": {
    "#text": "cpe:/o:ruijie:ap180",
    "@product": "AP180",
    "@vendor": "Ruijie Networks",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.2",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-022400",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU94068946/index.html",
      "@id": "JVNVU#94068946",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-68459",
      "@id": "CVE-2025-68459",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    }
  ],
  "title": "Ruijie Networks AP180 Series vulnerable to OS command injection"
}

    JVNDB-2025-000087

    Vulnerability from jvndb - Published: 2025-10-16 14:19 - Updated:2025-10-16 14:19
    Severity
    7.2 (High) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Summary
    Ruijie Networks RG-EST300 undocumented SSH functionality
    Details
    RG-EST300 provided by Ruijie Networks provides SSH server functionality. It is not documented in the manual, and enabled in the initial configuration.
    • Hidden functionality (CWE-912) - CVE-2025-58778
    Ryu Kuki, Iwaki Miyamoto, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported this vulnerability to the developer and coordinated. After the coordination was completed, they reported the case to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000087.html",
  "dc:date": "2025-10-16T14:19+09:00",
  "dcterms:issued": "2025-10-16T14:19+09:00",
  "dcterms:modified": "2025-10-16T14:19+09:00",
  "description": "RG-EST300 provided by Ruijie Networks provides SSH server functionality. It is not documented in the manual, and enabled in the initial configuration.\r\n\u003cul\u003e\u003cli\u003eHidden functionality (CWE-912) - CVE-2025-58778\u003c/li\u003e\u003c/ul\u003e\r\nRyu Kuki, Iwaki Miyamoto, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University reported this vulnerability to the developer and coordinated. After the coordination was completed, they reported the case to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000087.html",
  "sec:cpe": {
    "#text": "cpe:/o:ruijie:rg-est300",
    "@product": "RG-EST300",
    "@vendor": "Ruijie Networks",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "7.2",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-000087",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN72648885/index.html",
      "@id": "JVN#72648885",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-58778",
      "@id": "CVE-2025-58778",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Ruijie Networks RG-EST300 undocumented SSH functionality"
}

    JVNDB-2023-021762

    Vulnerability from jvndb - Published: 2024-05-17 13:54 - Updated:2024-05-17 13:54
    Severity
    6.8 (Medium) - cvssV3_0 - CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Summary
    Ruijie BCR810W/BCR860 vulnerable to OS command injection
    Details
    Network router BCR810W/BCR860 provided by Ruijie Networks Co., Ltd. contains an OS command injection vulnerability (CVE-2023-3608, CWE-78). Note that this vulnerability can only be exploited when the BCOS port of the product is connected to the Internet. JPCERT/CC has confirmed attacks attempt to exploit this vulnerability.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-021762.html",
  "dc:date": "2024-05-17T13:54+09:00",
  "dcterms:issued": "2024-05-17T13:54+09:00",
  "dcterms:modified": "2024-05-17T13:54+09:00",
  "description": "Network router BCR810W/BCR860 provided by Ruijie Networks Co., Ltd. contains an OS command injection vulnerability (CVE-2023-3608, CWE-78).\r\nNote that this vulnerability can only be exploited when the BCOS port of the product is connected to the Internet.\r\n\r\nJPCERT/CC has confirmed attacks attempt to exploit this vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-021762.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:ruijie:rg-bcr810w_firmware",
      "@product": "rg-bcr810w firmware",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:ruijie:rg-bcr860_firmware",
      "@product": "rg-bcr860 firmware",
      "@vendor": "Ruijie Networks",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2023-021762",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU92249385/index.html",
      "@id": "JVNVU#92249385",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-3608",
      "@id": "CVE-2023-3608",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-3608",
      "@id": "CVE-2023-3608",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    }
  ],
  "title": "Ruijie BCR810W/BCR860 vulnerable to OS command injection"
}