إرسال #296829: Ruijie switch RG-NBS2009G-P foreground CLI command injectionالمعلومات

عنوانRuijie switch RG-NBS2009G-P foreground CLI command injection
الوصفThere is an unauthorized access vulnerability in this interface, which can directly execute Ruijie CLI commands, causing command injection attacks. For example, you can use the following POC to execute the show log command to view all the log information of the switch.
المصدر⚠️ https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20RG-NBS2009G-P%20switch%20has%20a%20foreground%20CLI%20command%20injection%20vulnerability.pdf
المستخدم
 H0e4a0r1t (UID 65358)
ارسال12/03/2024 02:25 AM (2 سنوات منذ)
الاعتدال19/03/2024 02:35 PM (8 days later)
الحالةتمت الموافقة
إدخال VulDB257281 [Ruijie RG-NBS2009G-P حتى 20240305 /EXCU_SHELL Command1 تجاوز الصلاحيات]
النقاط17

Interested in the pricing of exploits?

See the underground prices here!