Remote Command Injection Vulnerability in Ruijie RG-UAC Devices

CVE-2024-5338

What is CVE-2024-5338?

A serious vulnerability has been identified in the Ruijie RG-UAC product line, affecting devices up to the version 20240516. This flaw resides in the script located at /view/vpn/autovpn/online.php, where improper validation of the peernode argument can lead to remote operating system command injection. This vulnerability allows attackers to manipulate user inputs, potentially gaining unauthorized access and executing arbitrary commands on the affected system. The exploit has been made public, increasing the risk of compromise for deployed systems, and the vendor has been unresponsive to pre-disclosure communications, leaving many users vulnerable. It is crucial for organizations using Ruijie devices to assess their exposure and take immediate action.

References