CVE-2024-4813

A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physicalInterface/interfacecommit.php. The manipulation of the argument name leads to os command injection. It is possible to launch the attack...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240506 and earlier versions, which...

CVE-2024-4816 Ruijie RG-UAC gre_add_commit.php os command injection

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240506. This affects an unknown part of the file /view/networkConfig/GRE/greaddcommit.php. The manipulation of the argument name/remote/local/IP leads to os command injection. It is possible to initiate the atta...

CVE-2024-4816 Ruijie RG-UAC gre_add_commit.php os command injection

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240506. This affects an unknown part of the file /view/networkConfig/GRE/greaddcommit.php. The manipulation of the argument name/remote/local/IP leads to os command injection. It is possible to initiate the atta...

CVE-2024-4816

CVE-2024-4816 affects Ruijie RG-UAC up to version 20240506. The vulnerability resides in an unknown part of /view/networkConfig/GRE/gre_add_commit.php, where manipulation of the name/remote/local/IP arguments enables OS command injection. Exploitation can be initiated remotely and has public disc...

CVE-2024-4815 Ruijie RG-UAC detail.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240506. Affected by this issue is some unknown functionality of the file /view/bugSolve/viewData/detail.php. The manipulation of the argument filename leads to os command injection. The attack may be launch...

CVE-2024-4815 Ruijie RG-UAC detail.php os command injection

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240506. Affected by this issue is some unknown functionality of the file /view/bugSolve/viewData/detail.php. The manipulation of the argument filename leads to os command injection. The attack may be launch...

CVE-2024-4815

CVE-2024-4815 affects Ruijie RG-UAC prior to 20240507. The issue lies in the file path /view/bugSolve/viewData/detail.php, where manipulating the filename parameter enables OS command injection. Exploitation is possible remotely and the vulnerability has been disclosed publicly. Affected versions...

CVE-2024-4814 Ruijie RG-UAC static_route_edit_commit.php os command injection

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/networkConfig/RouteConfig/StaticRoute/staticrouteeditcommit.php. The manipulation of the argument oldipmask/oldgateway leads to os command...

CVE-2024-4814 Ruijie RG-UAC static_route_edit_commit.php os command injection

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/networkConfig/RouteConfig/StaticRoute/staticrouteeditcommit.php. The manipulation of the argument oldipmask/oldgateway leads to os command...

CVE-2024-4814

CVE-2024-4814 affects Ruijie RG-UAC up to 20240506, with a remote OS command injection in /view/networkConfig/RouteConfig/StaticRoute/static_route_edit_commit.php. The vulnerability occurs when manipulating the oldipmask/oldgateway parameters, enabling an attacker to inject commands. Various sour...

CVE-2024-4813 Ruijie RG-UAC interface_commit.php os command injection

A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physicalInterface/interfacecommit.php. The manipulation of the argument name leads to os command injection. It is possible to launch the attack...

CVE-2024-4813 Ruijie RG-UAC interface_commit.php os command injection

A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physicalInterface/interfacecommit.php. The manipulation of the argument name leads to os command injection. It is possible to launch the attack...

CVE-2024-4813

Summary (CVE-2024-4813): Ruijie RG-UAC (versions up to 20240506/07) contains an OS command injection in an unknown function of the file /view/networkConfig/physicalInterface/interface_commit.php. By manipulating the name argument, an attacker can perform a remote exploit. The vulnerability has be...

PT-2024-32996 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC versions prior to 20240507 Description: A critical vulnerability exists in Ruijie RG-UAC. The manipulation of the name argument in an unknown function of the file /view/networkConfig/physicalInterface/interface commit.php leads ...

PT-2024-33006 · Ruijie · Ruijie Rg-Uac

Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC versions prior to 20240507 Description: A critical vulnerability exists in Ruijie RG-UAC. The issue affects an unknown functionality within the file /view/bugSolve/viewData/detail.php. Manipulation of the filename argument leads...

Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

A newer version of a malware loader called Hijack Loader has been observed incorporating an updated set of anti-analysis techniques to fly under the radar. "These enhancements aim to increase the malware's stealthiness, thereby remaining undetected for longer periods of time," Zscaler ThreatLabz...

Command Execution Vulnerability in RG-UAC 6000-E20C of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-24567)

RG-UAC 6000-E20C is an Internet behavior management and auditing product. A command execution vulnerability exists in the RG-UAC 6000-E20C of Beijing StarNet Ruijie Network Technology Co. Ltd, which can be exploited by an attacker to gain server privileges...

CVE-2024-4508

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/staticrouteeditipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is...

CVE-2024-4509

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...