Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2024-4506: A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manip...
CVE-2024-4506 · published 2 years ago
Summary
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command injection. The attack can be...
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ruijie | rg-uac_6000-cc_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-cc_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e10_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e10_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e10c_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e10c_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e20_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e20_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e20c_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e20c_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e20m_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e20m_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e50_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e50_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e50c_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e50c_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-e50m_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-e50m_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-ea_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-ea_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-ei_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-ei_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-isg02_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-isg02_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-isg10_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-isg10_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-isg200_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-isg200_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-isg40_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-isg40_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-si_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-si_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-u3100_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-u3100_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-u3210_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-u3210_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x100_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x100_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x100s_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x100s_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x20_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x20_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x200_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x200_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x20m_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x20m_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x20me_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x20me_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x300d_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x300d_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-x60_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-x60_firmware:-:*:*:*:*:*:*:* |
| ruijie | rg-uac_6000-xs_firmware |
All versions
cpe:2.3:o:ruijie:rg-uac_6000-xs_firmware:-:*:*:*:*:*:*:* |
Original advisory text
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manip...
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263110 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
- https://github.com/h0e4a0r1t/-2x3J-1rPc-1-0-/blob/main/Ruijie%20RG-UAC%20Unified... Broken Link
- https://vuldb.com/?ctiid.263110 Permissions Required VDB Entry
- https://vuldb.com/?id.263110 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.323816 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-78OS Command Injection
Timeline
Published5 May 2024
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2024-4506 · NVD
Track software like this
Free during beta