CVE-2024-4503

{"id": "CVE-2024-4503", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", "authentication": "MULTIPLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2024-05-05T22:15:07.927", "references": [{"url": "https://github.com/h0e4a0r1t/-2x3J-1rPc-1-0-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-dhcp_relay_commit.php.pdf", "tags": ["Broken Link"], "source": "[email protected]"}, {"url": "https://vuldb.com/?ctiid.263107", "tags": ["Permissions Required", "VDB Entry"], "source": "[email protected]"}, {"url": "https://vuldb.com/?id.263107", "tags": ["Third Party Advisory", "VDB Entry"], "source": "[email protected]"}, {"url": "https://vuldb.com/?submit.323813", "tags": ["Third Party Advisory", "VDB Entry"], "source": "[email protected]"}, {"url": "https://github.com/h0e4a0r1t/-2x3J-1rPc-1-0-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-dhcp_relay_commit.php.pdf", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://vuldb.com/?ctiid.263107", "tags": ["Permissions Required", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://vuldb.com/?id.263107", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://vuldb.com/?submit.323813", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263107. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad ha sido encontrada en Ruijie RG-UAC hasta 20240428 y clasificada como cr\u00edtica. Una funci\u00f3n desconocida del archivo /view/dhcp/dhcpConfig/dhcp_relay_commit.php es afectada por esta vulnerabilidad. La manipulaci\u00f3n del argumento interface_from conduce a la inyecci\u00f3n de comandos del sistema operativo. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-263107. NOTA: Se contact\u00f3 primeramente con el proveedor sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "lastModified": "2025-08-21T18:19:15.290", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-cc_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C815169-8607-44BD-BCE0-A86C21814461"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-cc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98C38758-7CF5-4B4D-84E0-3E38BF02D4CB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e10_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AF8BDB4-1399-436C-B3EE-696B4940AE86"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "338FB6AB-7A94-45FD-A826-9D7790FCAEE0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e10_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AF8BDB4-1399-436C-B3EE-696B4940AE86"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e10:3.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F02D3B37-AB31-4772-9444-0EE7ECD848BB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e10c_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E1361BC-E2B3-495F-B096-3494500F5F56"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e10c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6CE98BDE-35F2-47D0-90D2-68F83D9647BE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e20_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0E44D1C-E2C2-484F-9D1D-ACA5DAF9CCB4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e20:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18693B43-EE77-489F-A03F-62F1D9B1C814"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e20c_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DA9E1F3-A44F-4F77-B28E-3B32294EF80F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e20c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8C9AE852-45FD-4F54-9EB7-4355E070F9DB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e20m_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B99D0C6-F344-441A-B146-4DE18A5A4DF4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e20m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D66C1C1B-71A9-4834-9409-A2586C506585"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e50_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B051656-A369-40DA-94B2-C031778FFA70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CAD38DD2-020A-406A-A0E5-A952FED97CCC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e50c_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE79FCE2-2C58-4C34-998C-2E3644DFAE45"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e50c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "091BD1EF-BEE1-49FA-8CD3-5863793E1E66"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-e50m_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9AB6800-1860-4996-BE03-41FDB4934796"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-e50m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33900D0E-3439-406E-9F83-41ABBA8A4092"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-ea_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7ABA9B3-08E4-461D-82E0-EF80FE9862B3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-ea:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25FB193F-CA9B-4CA7-9F3B-654661373427"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-ei_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "934D5F8B-9968-4683-8C3E-1EFC5C241FC6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-ei:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BE135B87-13CF-4891-8196-CB867CAED5E4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-isg02_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B98EB5DA-FBAE-482B-A842-1A62ACB60E71"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-isg02:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9A7ED6B4-2679-4AA4-B5D7-14D25EF91C05"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-isg10_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2FC2DA1-BB89-45D6-A896-28D322D0AB34"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-isg10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F5EEE87F-615A-4CA9-84CE-C8C6E5251632"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-isg200_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "321E7736-2DBA-4D8F-9D2A-2807296658B2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-isg200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E7FFBA1D-875D-4B03-B244-56E0E2EE5AFB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-isg40_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7663290-8A48-4491-9887-E99FED0997FB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-isg40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "77CB8264-530E-47FF-819C-2A9D84034811"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-si_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2956049-270F-48B2-99D3-C4F3374C8731"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-si:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E4A9FA8E-98F0-4B9B-9912-2E168219A704"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-u3100_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A941E044-267A-4F9F-BB49-D72F0CDD29BE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-u3100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8CF1B13B-6A86-4756-B5CA-31CAFBA787D8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-u3210_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CF8818B-9665-44C7-B459-E9BF7CAE1835"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-u3210:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A8B0BD6-AA1E-4D68-ACEE-DACDC8FCB800"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x100_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "156F9F58-4D3F-41CE-9183-3DE34CBAC150"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "87388853-08FC-469D-9CFB-9157AC331E6A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x100s_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05191250-4BD7-442F-8D26-7D64DFC7F784"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x100s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39A8F7C9-6D84-4F33-9031-F47265BE1913"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x20_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BF55760-4EAA-401A-B2A0-67EDDA2281D3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x20:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7473CBF-7C1D-478A-97DC-042DA0C4A980"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x200_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64C88BB6-6D8F-4008-B815-00883860B358"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0E43BEB9-5B5C-4084-A049-B93EBE9B3124"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x20m_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E897A7A-B279-49ED-A3CA-14C338563C8D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x20m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8095ABB2-9BAE-4883-82C4-727A0E5676D5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x20me_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01CBF479-1142-4F63-9216-FF4B09E15F50"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x20me:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4706FC42-CD03-4690-867C-71B6CC1222B3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x300d_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57B23C2D-05A9-4EDB-8FC1-829A402D0882"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x300d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EEB0D7D3-958D-4CFE-98B2-988B7894E4E0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-x60_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11DD6935-CC7B-48FE-86A5-229F61F73EB4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-x60:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B42DC4A5-AFB6-49F0-B7E2-8057F8DE4D51"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-uac_6000-xs_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5647BA98-4115-4DAB-8780-D6D56F36D2BC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-uac_6000-xs:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3EA97261-02A0-432F-8A6D-86DB69A1255B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}