CVE-2024-5339: Ruijie RG-UAC online_check.php os command injection
A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/vpn/autovpn/onlinecheck.php. The manipulation of the argument peernode leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5339?
CVE-2024-5339 has been declared as critical.
How do I fix CVE-2024-5339?
To mitigate CVE-2024-5339, update your Ruijie RG-UAC firmware to a version later than 20240516.
What type of vulnerability is CVE-2024-5339?
CVE-2024-5339 is an OS command injection vulnerability.
What specific files are affected by CVE-2024-5339?
The vulnerability affects the file /view/vpn/autovpn/online_check.php in Ruijie RG-UAC devices.
Who is affected by CVE-2024-5339?
Devices running Ruijie RG-UAC firmware versions up to and including 20240516 are vulnerable to CVE-2024-5339.