CVE-2022-27983

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

CVE-2022-27983

The CVE-2022-27983 entry concerns RG-NBR-E Enterprise Gateway RG-NBR2100G-E, which contains an arbitrary file read vulnerability in the check.php URL parameter. The issue’s root cause is not fully detailed beyond this file-read flaw, and the connected sources confirm the affected product and vuln...

CVE-2022-27982

CVE-2022-27982 affects the RG-NBR-E Enterprise Gateway RG-NBR2100G-E. A remote code execution (RCE) vulnerability is exposed via the fileName parameter in /guest_auth/cfg/upLoadCfg.php. The NVD entry lists a high/critical impact in CVSS v2/v3 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base scores 7.5/...

CVE-2022-27983: Undefined Security Weakness

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

CVE-2022-27982: Undefined Security Weakness

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution RCE vulnerability via the fileName parameter at /guestauth/cfg/upLoadCfg.php...

PT-2022-18733

Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E affected versions not specified Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the url parameter in the check.php file. Recommendation...

PT-2022-18732

Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E affected versions not specified Description A remote code execution issue was discovered, allowing exploitation via the fileName parameter at the "/guest auth/cfg/upLoadCfg.php" API endpoint...

rg-sun.com Cross Site Scripting vulnerability OBB-2505251

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-21639

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-21627

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

Code injection

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

Cross site scripting

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-21627

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

CVE-2020-21627

The CVE-2020-21627 entry concerns Ruijie RG-UAC (unified access control) with a vulnerability in the /current_action.php?action=reboot path. The condition allows an attacker to cause a DoS via unspecified vectors. The affected component is the web action reboot handler, tied to the Ruijie RG-UAC ...

CVE-2020-21639

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-21639

The provided connected documents confirm CVE-2020-21639 affects Ruijie RG-UAC 6000-E50 (commit 9071227) with a cross-site scripting (XSS) flaw exploitable via the rule_name parameter. This permits execution of arbitrary web scripts/HTML by crafted payloads. The vulnerability is documented across ...

PT-2021-10646

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC commit 9071227 Description: The issue allows attackers to cause a denial of service DoS via unspecified vectors in the component /current action.php?action=reboot. Recommendations: For Ruijie RG-UAC commit 9071227, as a temporar...

CVE-2020-21627: Undefined Security Weakness

Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /currentaction.php?action=reboot, which allows attackers to cause a denial of service DoS via unspecified vectors...

CVE-2020-21639: Improper Neutralization of Input During Web Page Generation

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting XSS vulnerability via the rulename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2021-10647

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC 6000-E50 version 9071227 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload, exploiting a cross-site scripting XSS vulnerability. This is achieved through the rule name...