Ruijie Rg-Uac vulnerabilities

CVE-2024-4502 [HIGH] CWE-78 CVE-2024-4502: A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is a A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcp_client_commit.php. The manipulation of the argument ifName leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-4501 [HIGH] CWE-78 CVE-2024-4501: A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-4503 [HIGH] CWE-78 CVE-2024-4503: A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this v A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the publ

CVE-2024-4504 [HIGH] CWE-78 CVE-2024-4504: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. A A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to th

CVE-2024-4255 [HIGH] CWE-78 CVE-2024-4255: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. T A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/gre_edit_commit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and

CVE-2026-14736 [HIGH] CWE-284 CVE-2026-14736: A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown f A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.