Enviar #296829: Ruijie switch RG-NBS2009G-P foreground CLI command injectioninformación

TítuloRuijie switch RG-NBS2009G-P foreground CLI command injection
DescripciónThere is an unauthorized access vulnerability in this interface, which can directly execute Ruijie CLI commands, causing command injection attacks. For example, you can use the following POC to execute the show log command to view all the log information of the switch.
Fuente⚠️ https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20RG-NBS2009G-P%20switch%20has%20a%20foreground%20CLI%20command%20injection%20vulnerability.pdf
Usuario
 H0e4a0r1t (UID 65358)
Sumisión2024-03-12 02:25 (hace 2 años)
Moderación2024-03-19 14:35 (8 days later)
EstadoAceptado
Entrada de VulDB257281 [Ruijie RG-NBS2009G-P hasta 20240305 /EXCU_SHELL Command1 escalada de privilegios]
Puntos17

Do you want to use VulDB in your project?

Use the official API to access entries easily!