CVE-2024-4506 | Ruijie RG-UAC up to 20240428 ip_addr_edit_commit.php text_ip_addr/orgprelen/orgname os command injection

A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command injection.

This vulnerability was named CVE-2024-4506. The attack can be initiated remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.