Ruijie RG-EG Series Router Command Execution

The vulnerability of the vpnAction function /itboxpi/vpnquicksetservice.php?a=setvpn of the Ruijie RG-EG series router microprogramming software is related to the failure to eliminate special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to...

CVE-2024-2910

A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this issue is the function vpnAction of the file /itboxpi/vpnquicksetservice.php?a=setvpn of the component HTTP POST Request Handler. The manipulation of the argument...

Ruijie Networks RG-EG350: Operating System Command Injection Vulnerability

Ruijie Networks RG-EG350 is a multi-service integrated gateway product from China's Ruijie Networks that solves the current egress challenges of small and medium-sized networks. An OS command injection vulnerability exists in Ruijie Networks RG-EG350 20240318 and earlier versions, which originate...

CVE-2024-2910: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this issue is the function vpnAction of the file /itboxpi/vpnquicksetservice.php?a=setvpn of the component HTTP POST Request Handler. The manipulation of the argument...

PT-2024-2490

Name of the Vulnerable Software and Affected Versions Ruijie RG-EG350 versions prior to 20240319 Description A critical issue exists in the vpnAction function of the /itbox pi/vpn quickset service.php?a=set vpn file within the HTTP POST Request Handler component. The issue stems from a failure to...