Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the /view/userAuthentication/SSO/commit.php file in the Ruijie RG-UAC router microprogramming system exists due to the failure to implement measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...

CVE-2024-6186

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument adlogname leads to os command injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-6186 Ruijie RG-UAC commit.php os command injection

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument adlogname leads to os command injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-6186 Ruijie RG-UAC commit.php os command injection

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument adlogname leads to os command injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-6185 Ruijie RG-UAC commit.php get_ip_addr_details os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function getipaddrdetails of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be launched remotely...

CVE-2024-6185: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function getipaddrdetails of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be launched remotely...

CVE-2024-6186: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument adlogname leads to os command injection. It is possible to initiate the attack remotely. The exploi...

PT-2024-3812

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240516 Description A critical issue affects some unknown functionality of the file /view/vpn/autovpn/sub commit.php, allowing for os command injection through the manipulation of the key argument. This can be exploited...

CVE-2024-4504 Ruijie RG-UAC commit.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peerip/localip leads to os command injection. The attack may b...

CVE-2024-4504 Ruijie RG-UAC commit.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peerip/localip leads to os command injection. The attack may b...

CVE-2024-4501 Ruijie RG-UAC commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-4501 Ruijie RG-UAC commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The...

PT-2024-31373

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability has been found in Ruijie RG-UAC. The issue affects an unknown function of the file /view/dhcp/dhcpClient/dhcp client commit.php. The manipulation of the argument ifName leads to...

PT-2024-31401

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability was found in Ruijie RG-UAC, affecting an unknown part of the file /view/IPV6/ipv6Addr/ip addr add commit.php. The manipulation of the argument prelen/ethname leads to os command...

PT-2024-31390

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical issue has been found in Ruijie RG-UAC, affecting some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the peer ip/local ip argument leads to os...

CVE-2024-4504: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peerip/localip leads to os command injection. The attack may b...

PT-2024-31411

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability has been found in Ruijie RG-UAC, affecting unknown code of the file /view/IPV6/ipv6Addr/ip addr edit commit.php. The manipulation of the argument text ip addr/orgprelen/orgname...

PT-2024-31431 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC up to 20240428 Description: A critical issue affects some unknown functionality of the file /view/networkConfig/ArpTable/arp add commit.php. The manipulation of the text ip addr and text mac addr arguments leads to os command...

PT-2024-31362

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical issue affects the processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the tcpDump argument leads to os command injection. The attack may be initiated remotely. T...

CVE-2024-4501: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The...