Description
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Published: 2026-09-16
Score: 9.4 Critical
EPSS: 3.2% Low
KEV: No
Impact: Remote Command Execution
Action: Patch Immediately
AI Analysis

Impact

The flaw resides in the user_list_note module of the Ruijie RG‑EW3000GX router, allowing an attacker to inject arbitrary OS commands via the Name argument in the /etc/rg_config/admin file. This vulnerability effectively grants remote command execution on the device, prompting the need for urgent remediation.

Affected Systems

Affected system is the Ruijie RG‑EW3000GX with firmware EW_3.0(1)B11P380. No other versions are documented, so this is the likely scope.

Risk and Exploitability

The CVSS score of 9.4 indicates critical severity. EPSS of 2% suggests that exploitation is probable, though not widespread, and the vulnerability is not yet listed in the CISA KEV catalog. The attack vector is remote, likely through web or API interfaces that process the Name parameter; the flaw can be exploited from outside the local network if the device is exposed.

Generated by OpenCVE AI on September 18, 2026 at 06:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check if Ruijie has released a firmware update that removes this vulnerability; apply it promptly.
  • If no update is available, disable or block the user_list_note functionality or restrict access to the /etc/rg_config/admin endpoint.
  • Use network segmentation or firewall rules to limit inbound connections to the router to trusted IP addresses only.

Generated by OpenCVE AI on September 18, 2026 at 06:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 16 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Title Ruijie RG-EW3000GX user_list_note admin os command injection
First Time appeared Ruijie
Ruijie rg-ew3000gx
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:ruijie:rg-ew3000gx:*:*:*:*:*:*:*:*
Vendors & Products Ruijie
Ruijie rg-ew3000gx
References
Metrics cvssV2_0

{'score': 8.3, 'vector': 'AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Ruijie Rg-ew3000gx
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-16T17:35:47.027Z

Reserved: 2026-09-16T08:47:02.545Z

Link: CVE-2026-92398

cve-icon Vulnrichment

Updated: 2026-09-16T17:35:42.593Z

cve-icon NVD

Status : Deferred

Published: 2026-09-16T17:18:19.417

Modified: 2026-09-16T18:17:19.550

Link: CVE-2026-92398

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-18T08:00:06Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')