2 Min Read
CVE-2024-4502 through CVE-2024-4507
Written by Mission Secure
CVE-2024-4502, CVE-2024-4503, CVE-2024-4504, CVE-2024-4505, CVE-2024-4506, CVE-2024-4507 Multiple critical vulnerabilities have been discovered in Ruijie RG-UAC up to version 20240428, affecting various functionalities including DHCP, IPv6, and routing components. These vulnerabilities pose significant risks to operational technology (OT) environments leveraging Ruijie RG-UAC for network access control, potentially leading to unauthorized access, data breaches, and disruptions in critical infrastructure.
From the CVE database:
https://www.cve.org/CVERecord?id=CVE-2024-4502
A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263107. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
https://www.cve.org/CVERecord?id=CVE-2024-4503
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263108. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
https://www.cve.org/CVERecord?id=CVE-2024-4504
A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ip_addr_add_commit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263109 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
https://www.cve.org/CVERecord?id=CVE-2024-4505
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263110 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
https://www.cve.org/CVERecord?id=CVE-2024-4506
A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/static_route_add_ipv6.php. The manipulation of the argument text_prefixlen/text_gateway/devname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263111. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
https://www.cve.org/CVERecord?id=CVE-2024-4507
Originally published May 6, 2024.