CVE-2020-36870

Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE

State: Published
Severity: 9.2 Critical
Published: Nov 7, 2025
Updated: Nov 20, 2025
Reserved: Oct 30, 2025

Description

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Scores

CVSS	Score	Vector	Source
4.0	9.2 Critical	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
RG-EG1000CBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000FBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000KBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000LBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000CEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000SEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000GEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000XEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2000UEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000CEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000SEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000GEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000MEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000UEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG3000XEBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
RG-EG2100-PBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
EG3210Beijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
EG3220Beijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
EG3230Beijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
EG3250Beijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR108G-PBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR1000G-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR1300G-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR1700G-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR2100G-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR2500D-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR3000D-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR6120-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR6135-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR6205-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR6210-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR6215-EBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR800GBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR950GBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR1000G-CBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR2000G-CBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected
NBR3000G-SBeijing Star-Net Ruijie Network Technology Co., Ltd.	11.1(6)B9P1 to before 11.9(4)B12P1Affected

References

https://www.ruijie.com.cn/gy/xw-aqtg-zw/85638/vendor-advisorypatch
https://www.ruijie.com.cn/gy/xw-aqtg-gw/86747/vendor-advisorypatch
https://www.cnvd.org.cn/flaw/show/CNVD-2021-09650government-resourcethird-party-advisory
https://www.vulncheck.com/advisories/ruijie-networks-eg-and-nbr-series-routers-rcethird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.