Vulnerability · Published Nov 7, 2025 · Assigned by VulnCheck

CVE-2020-36870Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE

Critical 9.2

In plain English

A critical-severity code injection in EG3210 from Beijing Star-Net Ruijie Network Technology Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).

Severity (CVSS 4.0)9.2Critical

Exploit odds (30 days)0.6%top 50.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Affected products (as reported)

Vendor	Product	Versions
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG1000C	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000F	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000K	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000L	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000CE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000SE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000GE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000XE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000UE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000CE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000SE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000GE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000ME	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000UE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000XE	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2100-P	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3210	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3220	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3230	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3250	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR108G-P	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1000G-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1300G-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1700G-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2100G-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2500D-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR3000D-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6120-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6135-E	11.1(6)B9P1 – before 11.9(4)B12P1
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6205-E	11.1(6)B9P1 – before 11.9(4)B12P1

Weakness: CWE-94 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://www.ruijie.com.cn/gy/xw-aqtg-zw/85638/ vendor-advisory, patch
https://www.ruijie.com.cn/gy/xw-aqtg-gw/86747/ vendor-advisory, patch
https://www.cnvd.org.cn/flaw/show/CNVD-2021-09650 government-resource, third-party-advisory
https://www.vulncheck.com/advisories/ruijie-networks-eg-and-nbr-series-routers-rce third-party-advisory