CVE-2024-4504

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263108. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: May 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-450405.9gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses CVE-2024-450418.8External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment CVE-2024-450424.4Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of precondit CVE-2024-450435.3The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the CVE-2024-450448.8Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user CVE-2024-450456.1Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Coll CVE-2024-450465.4PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html`CVE-2024-450476.1svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svel CVE-2024-450486.5PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter whi CVE-2024-450497.5Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication.CVE-2024-45057.2A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view CVE-2024-450507.1Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messages loading route whe