CVE-2023-38902 | Severity.io

Description

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

Related CPE's

rg-ew1200_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew1200g_pro_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew1200r_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew1300g_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew1800gx_pro_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew1800gx_pro

rg-ew3000gx_pro_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew3000gx_pro

rg-ew300_pro_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew300r_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew3200gx_pro_firmware

3.0\(1\)b11p219

Vulnerable

rg-ew3200gx_pro

rg-nb3200-24gt4xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nb3200-24gt4xs

rg-nbs1850gc_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs1850gc_v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs1850gc_v2

rg-nbs2000_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs2009g-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs200_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs2026g-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs2026g_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs226f_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs228f_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs252f_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-24gt4sfp-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-24gt4sfp-p

rg-nbs3100-24gt4sfp-p_v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-24gt4sfp-p_v2

rg-nbs3100-24gt4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-24gt4sfp

rg-nbs3100-48gt4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-48gt4sfp

rg-nbs3100-8gt2sfp-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-8gt2sfp-p

rg-nbs3100-8gt2sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3100-8gt2sfp

rg-nbs3200-24gt4xs-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3200-24gt4xs-p

rg-nbs3200-24sfp\/8gt4xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3200-24sfp\/8gt4xs

rg-nbs3200-48gt4xs-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3200-48gt4xs-p

rg-nbs3200-48gt4xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs3200-48gt4xs

rg-nbs5100-24gt4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5100-24gt4sfp

rg-nbs5100-48gt4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5100-48gt4sfp

rg-nbs5200-24gt4x_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5200-24gt4x

rg-nbs5200-24sfp\/8gt4xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5200-24sfp\/8gt4xs

rg-nbs5200-48gt4xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5200-48gt4xs

rg-nbs5300-48mg6xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5300-48mg6xs

rg-nbs5528xg_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5552xg_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5552xg_v2.0_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5552xg_v2.0

rg-nbs5628xg_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5652xg_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5710-24gt4sfp-e-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5710-24gt4sfp-e-p

rg-nbs5710-24gt4sfp-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5710-24gt4sfp-e

rg-nbs5710-48gt4sfp-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5710-48gt4sfp-e

rg-nbs5750-28gt4xs-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5750-28gt4xs-e

rg-nbs5750v2-24gt4xs-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5750v2-24gt4xs-e

rg-nbs5750v2-24sfp4xs-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5750v2-24sfp4xs-e

rg-nbs5750v2-48gt4xs-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs5750v2-48gt4xs-e

rg-nbs5816xs_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs6002_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs6100-20xs4vs2qxs-s_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs6100-20xs4vs2qxs-s

rg-nbs7003_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbs7006_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-24gt4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-24gt4sfp

rg-s1930-24t4sfp-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-24t4sfp-p

rg-s1930-24t4sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-24t4sfp

rg-s1930-8gt2sfp-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-8gt2sfp-p

rg-s1930-8gt2sfp_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-8gt2sfp

rg-s1930-8t2sfp-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-s1930-8t2sfp-p

rg-eg210g-pe_firmware

3.0\(1\)b11p219

Vulnerable

rg-eg210g-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-eg105g-pe_firmware

3.0\(1\)b11p219

Vulnerable

rg-eg105g-e_firmware

3.0\(1\)b11p219

Vulnerable

rg-eg105g_v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-eg210g-p_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap1260\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap1260\(g\)

rg-rap1200\(e\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap1200\(e\)

rg-rap1200\(f\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap1200\(f\)

rg-rap120v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap100_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap120_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap6260\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap6260\(g\)

rg-rap2260\(e\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap2260\(e\)

rg-rap2260\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap2260\(g\)

rg-rap2200\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap2200\(g\)

rg-rap2200\(e\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap2200\(e\)

rg-rap2200\(f\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap2200\(f\)

rg-eap101_v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap102_v2_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap162\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap102\(f\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap102_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap101_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap630ioda_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap630cd_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap6261\(e\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap6261\(e\)

rg-rap6261\(cd\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-rap6261\(cd\)

rg-eap262\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap212\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap212\(f\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap202_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap201_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap602_firmware

3.0\(1\)b11p219

Vulnerable

rg-eap662\(g\)_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbc256_firmware

3.0\(1\)b11p219

Vulnerable

rg-nbc512_firmware

3.0\(1\)b11p219

Vulnerable

References

https://gist.github.com/ZIKH26/18693c67ee7d2f8d2c60231b19194c37

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary

CWE-77

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-08-17T13:15:11.347

1 year ago

Last modified

2023-08-23T16:55:24.197

1 year ago