Description
锐捷 RG-EW1200G 1.0（1）B1P5 中发现漏洞。受此漏洞影响的是组件管理员密码处理程序的文件 /api/sys/set_passwd 的未知功能。这种作会导致访问控制不当。攻击可以远程发起。
锐捷 RG-EW1200G /api/sys/set_passwd 权限绕过漏洞（CVE-2023-4169）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-4169
https://pentest-tools.com/vulnerabilities-exploits/ruijie-rg-ew1200g-router-password-reset_1657
https://vuldb.com/vuln/236185
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4169.yaml
https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-0881.html/
https://s4e.io/tools/ruijie-rg-ew1200g-router-password-reset-cve-2023-4169
https://app.opencve.io/cve/?product=rg-ew1200g_firmware&vendor=ruijie