Ruijie Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for Ruijie products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

In CISA KEV

Beyond CISA KEV

Sensor Observed

Virtual Patch Available

6 Ruijie KEVs added all time (primary attestation date).

Attested CVEs

CVE	Product	Confidence	CISA KEV	Added
CVE-2020-36870 Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE	RG-EG1000C, RG-EG2000F, RG-EG2000K, RG-EG2000L, RG-EG2000CE, RG-EG2000SE, RG-EG2000GE, RG-EG2000XE, RG-EG2000UE, RG-EG3000CE, RG-EG3000SE, RG-EG3000GE, RG-EG3000ME, RG-EG3000UE, RG-EG3000XE, RG-EG2100-P, EG3210, EG3220, EG3230, EG3250, NBR108G-P, NBR1000G-E, NBR1300G-E, NBR1700G-E, NBR2100G-E, NBR2500D-E, NBR3000D-E, NBR6120-E, NBR6135-E, NBR6205-E, NBR6210-E, NBR6215-E, NBR800G, NBR950G, NBR1000G-C, NBR2000G-C, NBR3000G-S	High	Not in CISA	24 Jan 2026
CVE-2025-34057 Ruijie NBR Router Administrative Credential Disclosure	NBR Router	High	Not in CISA	10 Jan 2026
CVE-2023-4169 Ruijie RG-EW1200G Administrator Password set_passwd access control	RG-EW1200G	High	Not in CISA	26 Nov 2025
CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection	RG-UAC	High	Not in CISA	29 Nov 2025
CVE-2023-3608 Ruijie BCR810W Tracert Page os command injection	BCR810W	High	Not in CISA	10 Jul 2023
CVE-2021-43163 A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the...	Ruijie RG-EW Series Routers	High	Not in CISA	04 May 2022

CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2
CWE-284 — Improper Access Control 1
CWE-306 — Missing Authentication for Critical Function 1
CWE-77 — Improper Neutralization of Special Elements used in a Command ('Command Injection') 1
CWE-94 — Improper Control of Generation of Code ('Code Injection') 1