Description
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ruijie | RG-EW1200G | 07161417 r483 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Ruijie RG-EW1200G Router Background - Login Bypass http/cves/2023/CVE-2023-4415.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://vuldb.com/?id.237518 vdb-entry technical-description
- https://vuldb.com/?ctiid.237518 signature permissions-required
- https://github.com/blakespire/repoforcve/tree/main/RG-EW1200G-logic broken-link exploit