Submit #330023: Ruijie Ruijie RG-UAC Unified Internet Behavior Management Audit System Ruijie RG-UAC Unified Internet Behavior Management Audit System Command Injectioninfo

TitleRuijie Ruijie RG-UAC Unified Internet Behavior Management Audit System Ruijie RG-UAC Unified Internet Behavior Management Audit System Command Injection
DescriptionThere is a command execution vulnerability in the Ruijie RG - UAC application management gateway backend /view/networkConfig/RouteConfig/nmc_StaticRoute/static_route_edit_ipv6.php interface. An attacker can execute arbitrary commands to control server permissions.
Source⚠️ https://github.com/h0e4a0r1t/I_L-HxK-pF-uZ1-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-nmc_StaticRoute%3Astatic_route_edit_ipv6.php.pdf
User
 H0e4a0r1t (UID 65358)
Submission05/06/2024 08:14 (2 years ago)
Moderation05/13/2024 07:11 (7 days later)
StatusDuplicate
VulDB entry263112 [Ruijie RG-UAC up to 20240428 static_route_edit_ipv6.php oldipmask/oldgateway/olddevname os command injection]
Points0

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!