Ruijie RG-UAC
Approved changes feed: RSS · Atom
cpe:2.3:h:ruijie:rg-uac:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Ruijie (96eac408-82a5-5bcd-bf63-b3afa2c2d83f) |
|---|---|
| Product | Rg Uac (ec25631f-1618-5b5b-9096-bb83fdc8f81a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6269 |
not_vulnerable | 2026-06-08 06:58:18.436772 |
Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection
MEDIUM (4.7)
A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument indevice leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269482 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-23T11:31:04.090Z
Updated: 2024-08-01T21:33:05.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6187 |
not_vulnerable | 2026-06-08 06:58:18.107424 |
Ruijie RG-UAC sub_commit.php os command injection
MEDIUM (6.3)
A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-269158 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-20T13:00:05.580Z
Updated: 2024-08-01T21:33:05.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6186 |
not_vulnerable | 2026-06-08 06:58:18.106719 |
Ruijie RG-UAC commit.php os command injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument ad_log_name leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-269157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-20T12:31:03.546Z
Updated: 2024-08-01T21:33:05.321Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6184 |
not_vulnerable | 2026-06-08 06:58:18.103196 |
Ruijie RG-UAC reboot_commit.php os command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/reboot/reboot_commit.php. The manipulation of the argument servicename leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269155. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-20T11:31:05.291Z
Updated: 2024-08-01T21:33:04.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5340 |
vulnerable | 2026-06-08 06:56:15.626621 |
Ruijie RG-UAC sub_commit.php os command injection
MEDIUM (4.7)
A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266246 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-25T21:31:03.847Z
Updated: 2024-08-01T21:11:12.386Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5338 |
vulnerable | 2026-06-08 06:56:15.611631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5337 |
vulnerable | 2026-06-08 06:56:15.607222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4816 |
vulnerable | 2026-06-08 06:50:18.708183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4814 |
vulnerable | 2026-06-08 06:50:18.697286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4504 |
vulnerable | 2026-06-08 06:50:17.884380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4503 |
vulnerable | 2026-06-08 06:50:17.880450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4502 |
vulnerable | 2026-06-08 06:50:17.876419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4501 |
vulnerable | 2026-06-08 06:50:17.868685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4255 |
vulnerable | 2026-06-08 06:50:17.310815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7304 |
vulnerable | 2026-06-08 06:21:57.514484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21627 |
not_vulnerable | 2026-06-08 05:22:30.935460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.