medium4.7
CVE-2024-4255
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419.
Impact
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/gre_edit_commit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262145 was assigned to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruijie | Rg-Uac 6000-Cc Firmware | All versions |
| Ruijie | Rg-Uac 6000-E10 Firmware | All versions |
| Ruijie | Rg-Uac 6000-E10c Firmware | All versions |
| Ruijie | Rg-Uac 6000-E20 Firmware | All versions |
| Ruijie | Rg-Uac 6000-E20c Firmware | All versions |
| Ruijie | Rg-Uac 6000-E20m Firmware | All versions |
| Ruijie | Rg-Uac 6000-E50 Firmware | All versions |
| Ruijie | Rg-Uac 6000-E50c Firmware | All versions |
| Ruijie | Rg-Uac 6000-E50m Firmware | All versions |
| Ruijie | Rg-Uac 6000-Ea Firmware | All versions |
| Ruijie | Rg-Uac 6000-Ei Firmware | All versions |
| Ruijie | Rg-Uac 6000-Isg02 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/h0e4a0r1t/g-hdkyyf7L-Z8-5v/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-gre_edit_commit.php.pdf
- https://vuldb.com/?ctiid.262145
- https://vuldb.com/?id.262145
- https://vuldb.com/?submit.319820
- https://github.com/h0e4a0r1t/g-hdkyyf7L-Z8-5v/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-gre_edit_commit.php.pdf
- https://vuldb.com/?ctiid.262145
- https://vuldb.com/?id.262145
- https://vuldb.com/?submit.319820