ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-4814

—
CVSS 4.0
5.3 medium
EPSS
6%p93
Published
()
Modified
Description

A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/networkConfig/RouteConfig/StaticRoute/static_route_edit_commit.php. The manipulation of the argument oldipmask/oldgateway leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vendors
ruijie
Products
rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware, rg-uac 6000-e10c firmware, rg-uac 6000-e20 firmware, rg-uac 6000-e20c firmware, rg-uac 6000-e20m firmware, rg-uac 6000-e50 firmware, rg-uac 6000-e50c firmware, rg-uac 6000-e50m firmware, rg-uac 6000-ea firmware, rg-uac 6000-ei firmware, rg-uac 6000-isg02 firmware
Weakness
CWE-78
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news

No ingested article mentions this CVE yet.