CVE-2023-3306

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-231802 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jun 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-330605.5Transient DOS in Core when DDR memory check is called while DDR is not initialized.CVE-2023-330617.5Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.CVE-2023-330627.5Transient DOS in WLAN Firmware while parsing a BTM request.CVE-2023-330637.8Memory corruption in DSP Services during a remote call from HLOS to DSP.CVE-2023-330645.5Transient DOS in Audio when invoking callback function of ASM driver.CVE-2023-330657.1Information disclosure in Audio while accessing AVCS services from ADSP payload.CVE-2023-330667.8Memory corruption in Audio while processing RT proxy port register driver.CVE-2023-330677.8Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.CVE-2023-330687.8Memory corruption in Audio while processing IIR config data from AFE calibration block.CVE-2023-330697.8Memory corruption in Audio while processing the calibration data returned from ACDB loader.CVE-2023-33078.8A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/s CVE-2023-330705.5Transient DOS in Automotive OS due to improper authentication to the secure IO calls.