CVE-2023-7330 - Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Back Back to CVE browser

CRITICAL

Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Published Nov 24, 2025

9.3

CRITICAL

CVSS 4.0

EPSS 0.62%

Description

Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of file type, path, or extension. A remote attacker can upload a crafted PHP file and then access it from the web root, resulting in arbitrary code execution in the context of the web service. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-14 UTC.

Affected products

Vendor Beijing Star-Net Ruijie Network Technology Co., Ltd. Product NBR Series Routers Default
n/a
- Version
  0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Beijing Star-Net Ruijie Network Technology Co., Ltd.

NBR Series Routers

n/a

Version	Status	Constraints
0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (6)

Link	Providers	Tags
https://cn-sec.com/archives/1995366.html		exploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-198992		Advisory
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/ruijie/ruijie-nbr-fileupload.yaml		exploit
https://rfk0z.github.io/posts/Ruijie-NBR-router-fileupload-php-arbitrary-file-upload-vulnerability/		exploit
https://www.cnblogs.com/Domren/articles/19093295		exploit
https://www.vulncheck.com/advisories/ruijie-networks-nbr-routers-unauthenticated-arbitrary-file-upload-via-fileuploadphp		third-party-advisory