CVE-2024-4255: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...

PT-2024-3817

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC versions up to 20240419 Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by manipulating the...

Command Execution Vulnerability in RG-UAC 6000-E50C at Beijing StarNet Ruijie Network Technology Co.

Ruijie Networks, founded in 2003, is an industry-leading provider of network infrastructure and solutions. A command execution vulnerability exists in the RG-UAC 6000-E50C of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by an attacker to execute arbitrary...

Command Execution Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Audit System of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-0589958)

RG-UAC Ruijie Unified Internet Behavior Management and Auditing System is an Internet behavior management and auditing product. A command execution vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Audit System of Beijing StarNet Ruijie Network Technology Co. Ltd,...

CVE-2020-21639

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-21627

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

Code injection

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

Cross site scripting

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-21627

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

CVE-2020-21627

The CVE-2020-21627 entry concerns Ruijie RG-UAC (unified access control) with a vulnerability in the /current_action.php?action=reboot path. The condition allows an attacker to cause a DoS via unspecified vectors. The affected component is the web action reboot handler, tied to the Ruijie RG-UAC ...

CVE-2020-21639

The provided connected documents confirm CVE-2020-21639 affects Ruijie RG-UAC 6000-E50 (commit 9071227) with a cross-site scripting (XSS) flaw exploitable via the rule_name parameter. This permits execution of arbitrary web scripts/HTML by crafted payloads. The vulnerability is documented across ...

CVE-2020-21639

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2021-10646

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC commit 9071227 Description: The issue allows attackers to cause a denial of service DoS via unspecified vectors in the component /current action.php?action=reboot. Recommendations: For Ruijie RG-UAC commit 9071227, as a temporar...

CVE-2020-21627: Undefined Security Weakness

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

PT-2021-10647

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC 6000-E50 version 9071227 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload, exploiting a cross-site scripting XSS vulnerability. This is achieved through the rule name...

CVE-2020-21639: Improper Neutralization of Input During Web Page Generation

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Command Execution Vulnerability in RG-UAC Ruijie Unified Online Behavior Management and Audit System

The RG-UAC Ruijie Unified Online Behavior Management and Audit System has a command execution vulnerability that can be exploited by attackers to gain control of the server...

Weak Password Vulnerability in RG-UAC 6000-ISG Video Access Security Gateway

RG-UAC 6000-ISG series video surveillance security gateway is a video surveillance network security reinforcement product independently developed by Ruijie Networks. The RG-UAC 6000-ISG video access security gateway has a weak password vulnerability, which can be exploited by attackers to obtain...

Information Disclosure Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Auditing System

RG-UAC is a self-developed Internet behavior management and auditing product developed by StarNet Ruijie Networks Co., Ltd. It is deployed at key nodes of the network in routing, transparent, bypass or hybrid modes to conduct comprehensive inspection and analysis of data at layers 2-7. The RG-UAC...

Logic Flaw Vulnerability in RG-UAC Riptide Unified Internet Behavior Management and Audit System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A logic flaw vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Auditin...