CVE-2024-4509: Ruijie RG-UAC add_commit.php os command injection
A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263113 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4509?
CVE-2024-4509 has been classified as a critical vulnerability.
What systems are affected by CVE-2024-4509?
CVE-2024-4509 affects Ruijie RG-UAC versions up to 20240428.
What type of vulnerability is CVE-2024-4509?
CVE-2024-4509 is an OS command injection vulnerability.
How can CVE-2024-4509 be mitigated?
To mitigate CVE-2024-4509, it is recommended to update Ruijie RG-UAC to the latest version.
What is the impact of exploiting CVE-2024-4509?
Exploitation of CVE-2024-4509 allows attackers to execute arbitrary OS commands through manipulated IP address or MAC address inputs.