Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE
Priority MEDIUM 49CWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0062 49th percentileScored 2026-11-07
Fix Fixed RG-EG1000C (Beijing Star-Net Ruijie Network Technology Co., Ltd.): 11.9(4)B12P1RG-EG2000F (Beijing Star-Net Ruijie Network Technology Co., Ltd.): 11.9(4)B12P1+35 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG1000C | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000F | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000K | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000L | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000CE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000SE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000GE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000XE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2000UE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000CE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000SE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000GE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000ME | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000UE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG3000XE | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | RG-EG2100-P | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3210 | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3220 | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3230 | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | EG3250 | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR108G-P | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1000G-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1300G-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1700G-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2100G-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2500D-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR3000D-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6120-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6135-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6205-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6210-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR6215-E | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR800G | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR950G | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR1000G-C | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR2000G-C | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
| Beijing Star-Net Ruijie Network Technology Co., Ltd. | NBR3000G-S | 11.1(6)B9P1 to before 11.9(4)B12P1 | 11.9(4)B12P1 | Patch available | CNA |
- RG-EG1000C VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000F VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000K VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000L VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000CE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000SE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000GE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000XE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2000UE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000CE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000SE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000GE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000ME VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000UE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG3000XE VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- RG-EG2100-P VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- EG3210 VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- EG3220 VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- EG3230 VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- EG3250 VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR108G-P VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR1000G-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR1300G-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR1700G-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR2100G-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR2500D-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR3000D-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR6120-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR6135-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR6205-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR6210-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR6215-E VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR800G VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR950G VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR1000G-C VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR2000G-C VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
- NBR3000G-S VendorBeijing Star-Net Ruijie Network Technology Co., Ltd. Affected 11.1(6)B9P1 to before 11.9(4)B12P1 Fixed in 11.9(4)B12P1 Patch available CNA
Remediation
- Fix · CNA RG-EG1000C (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000F (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000K (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000L (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000CE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000SE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000GE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000XE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2000UE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000CE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000SE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000GE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000ME (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000UE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG3000XE (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA RG-EG2100-P (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA EG3210 (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA EG3220 (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA EG3230 (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA EG3250 (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR108G-P (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR1000G-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR1300G-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR1700G-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR2100G-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR2500D-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR3000D-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR6120-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR6135-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR6205-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR6210-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR6215-E (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR800G (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR950G (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR1000G-C (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR2000G-C (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
- Fix · CNA NBR3000G-S (Beijing Star-Net Ruijie Network Technology Co., Ltd.) Fixed in 11.9(4)B12P1
Timeline
- 2026-10-02 Threatist record created from CVE-2020-36870
- 2026-10-03 Alias added: GHSA-j892-g9v8-f728
- 2026-10-08 EPSS moved to the below the 50th percentile
References
More Beijing Star-Net Ruijie Network Technology Co., Ltd. vulnerabilities
- TI-2023-06697 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php CVSS 4.0CRITICAL 9.3
Sources
- CVE-2020-36870 · CVE Program
- CVE-2020-36870 · NVD
- FIRST EPSS
- GHSA-j892-g9v8-f728 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences