Ruijie Rg-ew300 Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ruijie Rg-ew300 Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-38902 — CVSS 8.8 (high): A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches…
• CVE-2025-56085 — CVSS 8.8 (high): OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute…
• CVE-2025-56093 — CVSS 8.8 (high): OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted…
• CVE-2025-56094 — CVSS 8.8 (high): OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted…
• CVE-2025-56098 — CVSS 8.8 (high): OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted…
• CVE-2025-56108 — CVSS 8.8 (high): OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted…