| Title | Ruijie switch RG-NBS2009G-P foreground CLI command injection |
|---|
| Description | There is an unauthorized access vulnerability in this interface, which can directly execute Ruijie
CLI commands, causing command injection attacks. For example, you can use the following
POC to execute the show log command to view all the log information of the switch. |
|---|
| Source | ⚠️ https://h0e4a0r1t.github.io/2024/vulns/Ruijie%20RG-NBS2009G-P%20switch%20has%20a%20foreground%20CLI%20command%20injection%20vulnerability.pdf |
|---|
| User | H0e4a0r1t (UID 65358) |
|---|
| Submission | 03/12/2024 02:25 (2 years ago) |
|---|
| Moderation | 03/19/2024 14:35 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 257281 [Ruijie RG-NBS2009G-P up to 20240305 /EXCU_SHELL Command1 command injection] |
|---|
| Points | 17 |
|---|