Approved changes feed: RSS · Atom

cpe:2.3:o:ruijie:rg-uac_6000-x20m_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorRuijie (96eac408-82a5-5bcd-bf63-b3afa2c2d83f)
ProductRg Uac 6000 X20M Firmware (58b6eb44-e894-55a6-b888-a5bcd7daf56e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5340 vulnerable 2026-06-08 06:56:15.632041 Ruijie RG-UAC sub_commit.php os command injection
MEDIUM (4.7)
A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266246 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T21:31:03.847Z
Updated: 2024-08-01T21:11:12.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5339 vulnerable 2026-06-08 06:56:15.624790 Ruijie RG-UAC online_check.php os command injection
MEDIUM (4.7)
A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/vpn/autovpn/online_check.php. The manipulation of the argument peernode leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T16:31:04.180Z
Updated: 2024-08-01T21:11:12.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5338 vulnerable 2026-06-08 06:56:15.618641 Ruijie RG-UAC online.php os command injection
MEDIUM (4.7)
A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been classified as critical. Affected is an unknown function of the file /view/vpn/autovpn/online.php. The manipulation of the argument peernode leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266244. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T15:31:04.116Z
Updated: 2024-08-01T21:11:12.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5337 vulnerable 2026-06-08 06:56:15.610047 Ruijie RG-UAC user_commit.php os command injection
MEDIUM (4.7)
A vulnerability was found in Ruijie RG-UAC up to 20240516 and classified as critical. This issue affects some unknown processing of the file /view/systemConfig/sys_user/user_commit.php. The manipulation of the argument email2/user_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266243. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T15:00:05.158Z
Updated: 2024-08-01T21:11:12.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5336 vulnerable 2026-06-08 06:56:15.598561 Ruijie RG-UAC vlan_add_commit.php addVlan os command injection
MEDIUM (4.7)
A vulnerability has been found in Ruijie RG-UAC up to 20240516 and classified as critical. This vulnerability affects the function addVlan of the file /view/networkConfig/vlan/vlan_add_commit.php. The manipulation of the argument phyport leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266242 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T14:31:03.695Z
Updated: 2024-08-01T21:11:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4816 vulnerable 2026-06-08 06:50:18.711251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4815 vulnerable 2026-06-08 06:50:18.706915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4814 vulnerable 2026-06-08 06:50:18.700267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4813 vulnerable 2026-06-08 06:50:18.695956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4510 vulnerable 2026-06-08 06:50:18.001427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4509 vulnerable 2026-06-08 06:50:17.987516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4508 vulnerable 2026-06-08 06:50:17.911781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4507 vulnerable 2026-06-08 06:50:17.907981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4506 vulnerable 2026-06-08 06:50:17.904044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4505 vulnerable 2026-06-08 06:50:17.900351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4504 vulnerable 2026-06-08 06:50:17.886946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4503 vulnerable 2026-06-08 06:50:17.883218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4502 vulnerable 2026-06-08 06:50:17.879116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4501 vulnerable 2026-06-08 06:50:17.875504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4255 vulnerable 2026-06-08 06:50:17.354198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.