CVE-2020-36870

Published: Nov 7, 2025

Modified: Nov 20, 2025

PUBLISHED

Description

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Vendor	Product	Versions
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG1000C	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000F	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000K	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000L	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000CE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000SE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000GE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000XE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000UE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000CE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000SE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000GE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000ME	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000UE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000XE	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2100-P	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3210	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3220	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3230	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3250	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR108G-P	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1000G-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1300G-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1700G-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2100G-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2500D-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR3000D-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6120-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6135-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6205-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6210-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6215-E	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR800G	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR950G	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1000G-C	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2000G-C	affected `11.1(6)B9P1 - < 11.9(4)B12P1`
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR3000G-S	affected `11.1(6)B9P1 - < 11.9(4)B12P1`