PatchTheCVEruijie vulnerabilities
Recent CVEs affecting ruijie products. 11 tracked.
ruijie has 11 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-08. Highest priority: CVE-2024-42936 (score 61/100).
- CVE-2025-65363 HIGH 7.2 MITIGATE Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to e
- CVE-2025-9424 MEDIUM 4.7 MITIGATE A vulnerability was identified in Ruijie WS7204-A 2017.06.15
- CVE-2025-56752 CRITICAL 9.4 MITIGATE MITIGATE A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully b
- CVE-2025-25527 MEDIUM 5.1 MITIGATE Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification,
- CVE-2024-8166 MEDIUM 4.7 MITIGATE A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical
- CVE-2024-48783 HIGH 7.5 MITIGATE An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/s
- CVE-2024-42936 CRITICAL 9.8 MITIGATE The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remo
- CVE-2019-16641 HIGH 8.4 MITIGATE An issue was found on the Ruijie EG-2000 series gateway
- CVE-2019-16640 HIGH 7.5 MITIGATE An issue was found in upload.php on the Ruijie EG-2000 series gateway
- CVE-2019-16639 CRITICAL 9.8 MITIGATE An issue was found on the Ruijie EG-2000 series gateway
- CVE-2019-16638 HIGH 7.5 MITIGATE An issue was found on the Ruijie EG-2000 series gateway
FAQ
How do I fix ruijie vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ruijie being exploited right now?
None of the tracked ruijie CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ruijie CVE should I patch first?
CVE-2024-42936 currently ranks highest (61/100): The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remo.