CVE-2021-43163 : Security Advisory and Response

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth.

Understanding CVE-2021-43163

A Remote Code Execution (RCE) vulnerability affecting Ruijie Networks Ruijie RG-EW Series Routers.

What is CVE-2021-43163?

CVE-2021-43163 is an RCE vulnerability present in Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function.

The Impact of CVE-2021-43163

Allows attackers to execute arbitrary code remotely on affected routers.
Can lead to unauthorized access, data theft, and disruption of services.

Technical Details of CVE-2021-43163

Details of the technical aspects of the vulnerability.

Vulnerability Description

Type: Remote Code Execution (RCE)
Target: Ruijie Networks Ruijie RG-EW Series Routers
Location: /cgi-bin/luci/api/auth

Affected Systems and Versions

Systems: Ruijie RG-EW Series Routers
Versions: Up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55

Exploitation Mechanism

Exploited via the checkNet function allowing unauthorized remote code execution.

Mitigation and Prevention

Measures to address and prevent the CVE-2021-43163 vulnerability.

Immediate Steps to Take

Disable remote management access if not essential.
Apply vendor-supplied patches or updates promptly.
Monitor network traffic for suspicious activities.

Long-Term Security Practices

Regularly update router firmware and security configurations.
Implement network segmentation to limit the impact of potential breaches.

Patching and Updates

Check vendor notifications for security patches and updates.
Implement a robust patch management process to ensure timely application of fixes.