CVE-2023-26800

Name of the Vulnerable Software and Affected Versions Ruijie Networks RG-EW1200 Wireless Routers version EW 3.0(1)B11P204

Description A command injection issue was discovered, which can be exploited via the params.path parameter in the upgradeConfirm function.

Recommendations For version EW 3.0(1)B11P204, consider restricting access to the upgradeConfirm function until a patch is available. As a temporary workaround, avoid using the params.path parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.