Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-4814 Details
Description
A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/networkConfig/RouteConfig/StaticRoute/static_route_edit_commit.php. The manipulation of the argument oldipmask/oldgateway leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263935. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2024Exploitation: PocAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/h0e4a0r1t/I_L-HxK-pF-uZ1-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-StaticRoute%3Astatic_route_edit_commit.php.pdf | CVE | Broken Link |
| https://vuldb.com/?ctiid.263935 | CVE | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.263935 | CVE | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.330052 | CVE | Third Party AdvisoryVDB Entry |
| https://github.com/h0e4a0r1t/I_L-HxK-pF-uZ1-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-StaticRoute%3Astatic_route_edit_commit.php.pdf | [email protected] | Broken Link |
| https://vuldb.com/?ctiid.263935 | [email protected] | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.263935 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.330052 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ruijie rg-uac 6000-cc firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-cc | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e10 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e10 | 3.0 |
CPE
Remediation
| |
| ruijie rg-uac 6000-e10c firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e10c | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20c firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20c | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20m firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e20m | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50c firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50c | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50m firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-e50m | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-ea firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-ea | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-ei firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-ei | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg02 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg02 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg10 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg10 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg200 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg200 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg40 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-isg40 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-si firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-si | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-u3100 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-u3100 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-u3210 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-u3210 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x100 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x100 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x100s firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x100s | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x200 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x200 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20m firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20m | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20me firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x20me | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x300d firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x300d | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x60 firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-x60 | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-xs firmware | All versions |
CPE
Remediation
| |
| ruijie rg-uac 6000-xs | All versions |
CPE
Remediation
| |
Change History
8 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 21, 2025 | Reanalysis | [email protected] |
| Aug 21, 2025 | Initial Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jun 4, 2024 | CVE Modified | [email protected] |
| May 17, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | New CVE Received | [email protected] |