CVE:CVE-2023-27796
CNNVD:CNNVD-202303-2147
Ruijie RG-EW Series Routers是中国锐捷网络（Ruijie）公司的一款路由器。
RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204版本、RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204版本、RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204版本存在安全漏洞，该漏洞源于通过diagnostic.lua的runPackDiagnose函数的data.ip、data.protocal、data.iface和data.package参数发现包含命令注入漏洞。
solution:Upgrade ruijienetworks rg-ew1800gx_pro_firmware to a higher version than ew_3.0(1b11p204,and avoid the version ew_3.0(1)b11p204; Upgrade ruijienetworks rg-ew3200gx_pro_firmware to a higher version than ew_3.0(1b11p204,and avoid the version ew_3.0(1)b11p204; Upgrade ruijienetworks rg-ew1200g_pro_firmware to a higher version than ew_3.0(1b11p204,and avoid the version ew_3.0(1)b11p204