CVE-2024-6269: Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection
A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function getip.addrdetails of the file /view/vpn/autovpn/sxhvpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument indevice leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269482 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6269?
CVE-2024-6269 is classified as a critical vulnerability.
How does CVE-2024-6269 affect Ruijie RG-UAC?
CVE-2024-6269 affects the get_ip.addr_details function in the HTTP POST Request Handler on Ruijie RG-UAC devices.
What type of vulnerability is CVE-2024-6269?
CVE-2024-6269 is a remote code execution vulnerability that can be exploited via manipulated input.
How do I fix CVE-2024-6269?
To fix CVE-2024-6269, apply the latest patches provided by Ruijie for the RG-UAC software.
What components are affected by CVE-2024-6269?
CVE-2024-6269 affects the /view/vpn/autovpn/sxh_vpnlic.php component of Ruijie RG-UAC.