Skip to content
Fencer Intel
critical 9.2

CVE-2020-36870 json

Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE

published last yr. modified 4mo ago also EUVD-2020-30818

cvss
9.2
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 50%
public exploits
0
none known

Summary

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.

Patch / fix

  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000UE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000CE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000SE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000GE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000ME 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000UE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000XE 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2100-P 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3210 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3220 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3230 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3250 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR108G-P 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1300G-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1700G-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2100G-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2500D-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000D-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6120-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6135-E 11.9(4)B12P1
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6205-E 11.9(4)B12P1

Is CVE-2020-36870 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
11mo ago

Exploit prediction

0.62% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 4.0 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 4.0 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000UE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000CE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000SE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000GE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000ME
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000UE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG3000XE
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2100-P
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3210
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3220
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3230
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. EG3250
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR108G-P
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1300G-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1700G-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2100G-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2500D-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000D-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6120-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6135-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6205-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6210-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR6215-E
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR800G
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR950G
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR1000G-C
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR2000G-C
  • Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR3000G-S

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.