提出 #296829: Ruijie switch RG-NBS2009G-P foreground CLI command injection情報

タイトルRuijie switch RG-NBS2009G-P foreground CLI command injection
説明There is an unauthorized access vulnerability in this interface, which can directly execute Ruijie CLI commands, causing command injection attacks. For example, you can use the following POC to execute the show log command to view all the log information of the switch.
ソース⚠️ https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20RG-NBS2009G-P%20switch%20has%20a%20foreground%20CLI%20command%20injection%20vulnerability.pdf
ユーザー
 H0e4a0r1t (UID 65358)
送信2024年03月12日 02:25 (3 年 ago)
モデレーション2024年03月19日 14:35 (8 days later)
ステータス承諾済み
VulDBエントリ257281 [Ruijie RG-NBS2009G-P 迄 20240305 /EXCU_SHELL Command1 特権昇格]
ポイント17

Do you know our Splunk app?

Download it now for free!