CVE-2023-48849

criticalpriority · attend · 49EPSS 0.013 · 70 %ileexploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.29% (70th) EPSS

CVSS 9.8 · critical

Is it mine?

26 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119US

exploits (1)

Public proof-of-concept and weaponised exploit code.

delsploit/CVE-2023-48849delsploit/CVE-2023-48849PoC · poc_in_github

affected products (26)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Ruijie Networks Co., Ltd. RG-EG105G≤ EG 3.0(1)B11P216fstec_bduRU
Ruijie Networks Co., Ltd. RG-EG105G V2≤ EG 3.0(1)B11P216fstec_bduRU
Ruijie Networks Co., Ltd. RG-EG105G-P≤ EG 3.0(1)B11P216fstec_bduRU
Ruijie Networks Co., Ltd. RG-EG305GH-P-E≤ EG 3.0(1)B11P216fstec_bduRU
ruijie rg-eg1000c firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg1000c_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg1000e firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg1000e_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105g firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105g_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105g v2 firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105g_v2_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105g-e firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105g-e_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105g-p firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105g-p_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105g-pe firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105g-pe_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105gw(t) firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105gw\(t\)_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg105gw-x firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg105gw-x_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg2000ce firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg2000ce_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg209gs firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg209gs_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg2100-p firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg2100-p_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg210g-e firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg210g-e_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg210g-p firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg210g-p_firmware:*:*:*:*:*:*:*:*
ruijie rg-eg210g-pe firmware= 3.0(1)b11p216nvdUScpe:2.3:o:ruijie:rg-eg210g-pe_firmware:*:*:*:*:*:*:*:*

showing 20 of 26

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2023-12-06modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan