{"vulnerability": "CVE-2021-43163", "sightings": [{"uuid": "ba4c37a8-0ef4-4c15-b33f-7f9862d0a04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "4bc608ff-7c1e-46a5-b31e-6530c35fd0da", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81027123-38d0-4796-a9df-b0d9a6633a72", "content": "", "creation_timestamp": "2026-06-23T14:06:16.154648Z"}, {"uuid": "a65ecc48-e467-424f-bf67-49221da9d57d", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-43163", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edcd5110-5851-40b7-b621-2f96b2e72b80", "content": "", "creation_timestamp": "2026-06-30T09:42:32.417841Z"}, {"uuid": "e5b69d07-63c2-4be8-b31c-3461678f8c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "seen", "source": "https://t.me/hacking_Attack/52114", "content": "Exploit Collector\nRuijie RG-EW Remote Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png Ruijie RG-EW series routers suffer from six different remote code execution vulnerabilities. Findings were tested on Ruijie RG-EW1200 and Ruijie RG-EW1200G PRO.\n\nSHA-256 | afc11add2a38d6b294427cd246c931f425417794c6ce79f0f9a682f5ccbf3cd2Download Advisory: Multiple Vulnerabilities in Ruijie RG-EW Series Routers\n\n=======\nSummary\n=======\n\nMultiple vulnerabilities was found in Ruijie RG-EW Series Routers from\nRuijie Networks, including 1 pre-authenticated and 5 post-authenticated\nRemote Code Execution (RCE).\n\n==============\nCVE-2021-43159\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the setSessionTime function in /cgi-bin/luci/api/common.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/common.lua\nFunction: setSessionTime\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43160\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the switchFastDhcp function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: switchFastDhcp\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43161\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the doSwitchApi function in /cgi-bin/luci/api/switch.\n\n## Details\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/switch.lua\nFunction: doSwitchApi\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43162\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the runPackDiagnose function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: runPackDiagnose\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43163\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the checkNet function in /cgi-bin/luci/api/auth.\n\n## Details\n\n- Type: Pre-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/noauth.lua\nFunction: checkNet\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43164\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the updateVersion function in /cgi-bin/luci/api/wireless.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/wireless.lua\nFunction: updateVersion\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n-- \nKhoa Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:42.697460Z"}, {"uuid": "3ac6dcc7-6c5a-4a05-8298-cf8c5234b083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "seen", "source": "https://t.me/hacking_Attack/52114", "content": "Exploit Collector\nRuijie RG-EW Remote Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png Ruijie RG-EW series routers suffer from six different remote code execution vulnerabilities. Findings were tested on Ruijie RG-EW1200 and Ruijie RG-EW1200G PRO.\n\nSHA-256 | afc11add2a38d6b294427cd246c931f425417794c6ce79f0f9a682f5ccbf3cd2Download Advisory: Multiple Vulnerabilities in Ruijie RG-EW Series Routers\n\n=======\nSummary\n=======\n\nMultiple vulnerabilities was found in Ruijie RG-EW Series Routers from\nRuijie Networks, including 1 pre-authenticated and 5 post-authenticated\nRemote Code Execution (RCE).\n\n==============\nCVE-2021-43159\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the setSessionTime function in /cgi-bin/luci/api/common.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/common.lua\nFunction: setSessionTime\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43160\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the switchFastDhcp function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: switchFastDhcp\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43161\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the doSwitchApi function in /cgi-bin/luci/api/switch.\n\n## Details\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/switch.lua\nFunction: doSwitchApi\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43162\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the runPackDiagnose function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: runPackDiagnose\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43163\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the checkNet function in /cgi-bin/luci/api/auth.\n\n## Details\n\n- Type: Pre-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/noauth.lua\nFunction: checkNet\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43164\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the updateVersion function in /cgi-bin/luci/api/wireless.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/wireless.lua\nFunction: updateVersion\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n-- \nKhoa Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:54.654103Z"}, {"uuid": "7d2b67bd-f035-477b-b57d-e241425fb533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "seen", "source": "https://t.me/hacking_Attack/52114", "content": "Exploit Collector\nRuijie RG-EW Remote Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png Ruijie RG-EW series routers suffer from six different remote code execution vulnerabilities. Findings were tested on Ruijie RG-EW1200 and Ruijie RG-EW1200G PRO.\n\nSHA-256 | afc11add2a38d6b294427cd246c931f425417794c6ce79f0f9a682f5ccbf3cd2Download Advisory: Multiple Vulnerabilities in Ruijie RG-EW Series Routers\n\n=======\nSummary\n=======\n\nMultiple vulnerabilities was found in Ruijie RG-EW Series Routers from\nRuijie Networks, including 1 pre-authenticated and 5 post-authenticated\nRemote Code Execution (RCE).\n\n==============\nCVE-2021-43159\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the setSessionTime function in /cgi-bin/luci/api/common.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/common.lua\nFunction: setSessionTime\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43160\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the switchFastDhcp function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: switchFastDhcp\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43161\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the doSwitchApi function in /cgi-bin/luci/api/switch.\n\n## Details\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/switch.lua\nFunction: doSwitchApi\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43162\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the runPackDiagnose function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: runPackDiagnose\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43163\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the checkNet function in /cgi-bin/luci/api/auth.\n\n## Details\n\n- Type: Pre-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/noauth.lua\nFunction: checkNet\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43164\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the updateVersion function in /cgi-bin/luci/api/wireless.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/wireless.lua\nFunction: updateVersion\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n-- \nKhoa Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T23:00:04.677219Z"}, {"uuid": "f5886d69-6f26-40a2-8033-05daffea508a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43163", "type": "seen", "source": "https://t.me/hacking_Attack/52114", "content": "Exploit Collector\nRuijie RG-EW Remote Code Execution\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png Ruijie RG-EW series routers suffer from six different remote code execution vulnerabilities. Findings were tested on Ruijie RG-EW1200 and Ruijie RG-EW1200G PRO.\n\nSHA-256 | afc11add2a38d6b294427cd246c931f425417794c6ce79f0f9a682f5ccbf3cd2Download Advisory: Multiple Vulnerabilities in Ruijie RG-EW Series Routers\n\n=======\nSummary\n=======\n\nMultiple vulnerabilities was found in Ruijie RG-EW Series Routers from\nRuijie Networks, including 1 pre-authenticated and 5 post-authenticated\nRemote Code Execution (RCE).\n\n==============\nCVE-2021-43159\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the setSessionTime function in /cgi-bin/luci/api/common.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/common.lua\nFunction: setSessionTime\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43160\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the switchFastDhcp function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: switchFastDhcp\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43161\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the doSwitchApi function in /cgi-bin/luci/api/switch.\n\n## Details\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/switch.lua\nFunction: doSwitchApi\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43162\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the runPackDiagnose function in /cgi-bin/luci/api/diagnose.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/diagnose.lua\nFunction: runPackDiagnose\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43163\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the checkNet function in /cgi-bin/luci/api/auth.\n\n## Details\n\n- Type: Pre-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/noauth.lua\nFunction: checkNet\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n==============\nCVE-2021-43164\n==============\n\n## Description\n\nA Remote Code Execution (RCE) vulnerability exists in Ruijie Networks\nRuijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55\nvia the updateVersion function in /cgi-bin/luci/api/wireless.\n\n## Details\n\n- Type: Post-authenticated RCE / Command Injection\n- Discoverer: Minh Khoa of VSEC\n- Affected Component:\nFile: /usr/lib/lua/luci/modules/wireless.lua\nFunction: updateVersion\n- Tested on: Ruijie RG-EW1200, Ruijie RG-EW1200G PRO\n\n-- \nKhoa Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:14.587797Z"}]}