{"uuid": "e2f38261-2773-4ba3-9c67-cc82658639b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43159", "type": "seen", "source": "https://t.me/hacking_Attack/52114", "content": "Exploit Collector\nRuijie RG-EW Remote Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png Ruijie RG-EW series routers suffer from six different remote code execution vulnerabilities. Findings were tested on Ruijie RG-EW1200 and Ruijie RG-EW1200G PRO.\n\nSHA-256 | afc11add2a38d6b294427cd246c931f425417794c6ce79f0f9a682f5ccbf3cd2Download Advisory: Multiple Vulnerabilities in Ruijie RG-EW Series Routers\n\n=======\nSummary\n=======\n\nMultiple vulnerabilities was found in Ruijie RG-EW Series Routers from\nRuijie Networks, including 1 pre-authenticated and 5 post-authenticated\nRemote Code Execution (RCE).\n\n==============\nCVE-2021-43159\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the setSessionTime function in /cgi-bin/luci/api/common.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/common.lua\nFunction: setSessionTime\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43160\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the switchFastDhcp function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: switchFastDhcp\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43161\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the doSwitchApi function in /cgi-bin/luci/api/switch.\n\n## Details\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/switch.lua\nFunction: doSwitchApi\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43162\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the runPackDiagnose function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: runPackDiagnose\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43163\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the checkNet function in /cgi-bin/luci/api/auth.\n\n## Details\n\n- Type: Pre-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/noauth.lua\nFunction: checkNet\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43164\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the updateVersion function in /cgi-bin/luci/api/wireless.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/wireless.lua\nFunction: updateVersion\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n-- \nKhoa Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:54.557863Z"}