CVE record · CVE-2020-36870

Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCE

CVSS 9.2 CriticalCriticalEPSS 0.0062 · 50th percentile

Critical, because:

CVSS score 9.2: 9.0 or more.

Published by the CVE Program (CNA: VulnCheck) at 7 Nov 2025, 21:52 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG1000C	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000F	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000K	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000L	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000CE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000SE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000GE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000XE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2000UE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000CE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000SE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000GE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000ME	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000UE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG3000XE	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	RG-EG2100-P	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3210	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3220	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3230	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	EG3250	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR108G-P	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1000G-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1300G-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1700G-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2100G-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2500D-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR3000D-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6120-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6135-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6205-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6210-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR6215-E	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR800G	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR950G	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR1000G-C	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR2000G-C	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected
Beijing Star-Net Ruijie Network Technology Co., Ltd.	NBR3000G-S	affected 11.1(6)B9P1 to before 11.9(4)B12P1 custom Other versions: unaffected

Identifiers: CVE-2020-36870
CNA: VulnCheck
Weakness (CWE): CWE-94
Tags: Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG1000C
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000F
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000K
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000L
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000CE
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000SE
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000GE
Beijing Star-Net Ruijie Network Technology Co., Ltd. RG-EG2000XE
Code injection
Published: 7 Nov 2025
Updated: 20 Nov 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
9.2	Critical	4.0	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CNA (VulnCheck)

CISA KEV Not listed.
EPSS 0.0062, the 50th percentile, on 15 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 7 Nov 2025. New records show when each source confirmed them.

Sources

References from the CNA

www.ruijie.com.cn/gy/xw-aqtg-zw/85638/ vendor-advisorypatch
www.ruijie.com.cn/gy/xw-aqtg-gw/86747/ vendor-advisorypatch
www.cnvd.org.cn/flaw/show/CNVD-2021-09650 government-resourcethird-party-advisory
www.vulncheck.com/advisories/ruijie-networks-eg-and-nbr-series-routers-rce third-party-advisory

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.