← Back to browse · API

CVE-2023-4169

Severity
MEDIUM
CVSS
6.3
EPSS
0.4923
Risk score
42.43
CISA KEV
No
PoC
No
Published
2023-08-05
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-54048, GHSA-4MVQ-G24W-Q4W9
Products
Ruijie:RG-EW1200G 1.0(1)B1P5
Sources
euvd EUVD-2023-54048

Description

A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/set_passwd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References