Skip to content
OpenAdvisories
Critical · 9.2 CVE-2020-36870 EUVD-2020-30818GHSA-j892-g9v8-f728

Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE

Published Nov 7, 2025 · Updated Nov 20, 2025 · Assigned by VulnCheck

Vendor: Beijing Star-Net Ruijie Network Technology Product: EG3210 Product: EG3220 Product: EG3230 Product: EG3250 Product: NBR1000G-C Product: NBR1000G-E Product: NBR108G-P Product: NBR1300G-E Product: NBR1700G-E Product: NBR2000G-C Product: NBR2100G-E Product: NBR2500D-E Product: NBR3000D-E Product: NBR3000G-S Product: NBR6120-E Product: NBR6135-E Product: NBR6205-E Product: NBR6210-E Product: NBR6215-E Product: NBR800G Product: NBR950G Product: RG-EG1000C Product: RG-EG2000CE Product: RG-EG2000F Product: RG-EG2000GE Product: RG-EG2000K Product: RG-EG2000L Product: RG-EG2000SE Product: RG-EG2000UE Product: RG-EG2000XE Product: RG-EG2100-P Product: RG-EG3000CE Product: RG-EG3000GE Product: RG-EG3000ME Product: RG-EG3000SE Product: RG-EG3000UE Product: RG-EG3000XE

Description

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Affected products

VendorProductAffectedFixed
Beijing Star-Net Ruijie Network Technology RG-EG1000C 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000F 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000K 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000L 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000CE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000SE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000GE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000XE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2000UE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000CE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000SE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000GE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000ME 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000UE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG3000XE 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology RG-EG2100-P 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology EG3210 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology EG3220 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology EG3230 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology EG3250 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR108G-P 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR1000G-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR1300G-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR1700G-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR2100G-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR2500D-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR3000D-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR6120-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR6135-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR6205-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR6210-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR6215-E 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR800G 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR950G 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR1000G-C 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR2000G-C 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology NBR3000G-S 11.1(6)B9P1 – < 11.9(4)B12P1 11.9(4)B12P1

References