PT-2024-31382

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability was found in Ruijie RG-UAC, affecting an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp relay commit.php. The manipulation of the interface from argument leads to ...

CVE-2024-4503: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcprelaycommit.php. The manipulation of the argument interfacefrom leads to os command injection. The attack can be...

CVE-2024-4505: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ipaddraddcommit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to initiate the attack...

PT-2024-31414

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/static route add ipv6.php. The manipulation of the arguments text prefixlen, text gateway, and devname leads to os...

CVE-2024-4504: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peerip/localip leads to os command injection. The attack may b...

CVE-2024-4501: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-4255

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...

CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...

CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...

CVE-2024-4255

CVE-2024-4255 affects Ruijie RG-UAC (up to 20240419). The issue is in the file /view/network Config/GRE/gre_edit_commit.php, where manipulation of the parameter name enables OS command injection. Exploitation may be possible remotely and the vulnerability entry has been publicized (VDB-262145). P...

CVE-2024-4255: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...

PT-2024-3817

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC versions up to 20240419 Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by manipulating the...

CVE-2024-31616

An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...

CVE-2024-31616

An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...

CVE-2024-31616: Improper Filtering of Special Elements

An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...

Ruijie Networks RG-RSR10-01G-T 安全漏洞

Ruijie Networks RG-RSR10-01G-T is a wireless router from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks RG-RSR10-01G-T. An attacker could exploit the vulnerability to execute arbitrary code via a specially crafted HTTP request...

CVE-2024-32394

The Ruijie Networks RG-RSR10-01G-T wireless router is vulnerable to a flaw that allows a remote attacker to execute arbitrary code via a specially crafted HTTP request . The affected software version is RSR 3.0(1)B9P2 RSR10-01G-TW-S 07150910 . As a mitigation, it is recommended to restrict access...

CVE-2024-32394: Undefined Security Weakness

An issue in ruijie.com/cn RG-RSR10-01G-TWA-S RSR3.01B9P2RSR10-01G-TW-S07150910 and RG-RSR10-01G-TWA-S RSR3.01B9P2RSR10-01G-TW-S07150910 allows a remote attacker to execute arbitrary code via a crafted HTTP request...

CVE-2024-32394

An issue in ruijie.com/cn RG-RSR10-01G-TWA-S RSR3.01B9P2RSR10-01G-TW-S07150910 and RG-RSR10-01G-TWA-S RSR3.01B9P2RSR10-01G-TW-S07150910 allows a remote attacker to execute arbitrary code via a crafted HTTP request...

The vulnerability of the setAction function (/itbox_pi/networksafe.php?a=set) in the Ruijie RG-EG series of router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the setAction function /itbox.pi.networksafe.php?a=set in the Ruijie RG-EG series of router microprogramming systems is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote...