Description
锐捷统一上网行为管理与审计系统RG-UAC 20240428及之前版本中存在命令注入漏洞，此漏洞是由于未充分验证用户输入ip_addr_add_commit.php的数据所导致的。
锐捷 RG-UAC CVE-2024-4505 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2024-4505
https://nvd.nist.gov/vuln/detail/cve-2024-4505
https://www.cve.org/CVERecord?id=CVE-2024-4505
https://access.redhat.com/security/cve/cve-2024-4505
https://cvefeed.io/vuln/product/143152/ruijierg-uac_6000-e50/?page=1
https://feedly.com/cve/vendors/ruijie
https://vuldb.com/es/?id.263109
https://vulners.com/search/vendors/ruijie/products/rg-uac%206000-e50c%20firmware