Tenda FH1206 addVlan DoS

The vulnerability of the addVlan function /view/networkConfig/vlan/vlanaddcommit.php of the Tenda FH1206 router software relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

PT-2024-3816

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC versions up to 20240516 Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by manipulating the...

CVE-2024-5336: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in Ruijie RG-UAC up to 20240516 and classified as critical. This vulnerability affects the function addVlan of the file /view/networkConfig/vlan/vlanaddcommit.php. The manipulation of the argument phyport leads to os command injection. The attack can be initiated...