PT-2026-93855 · Ruijie · Rg-Ew3000Gx

Legion_Tl

·

CVE-2026-92398

·

Publicado

2026-09-16

·

Atualizado

2026-09-16

CVSS v2.0

8.3

Alta

VetorAV:N/AC:L/Au:M/C:C/I:C/A:C
A vulnerability was found in Ruijie RG-EW3000GX EW 3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg config/admin of the component user list note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Exploit

Correção

Command Injection

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-77CWE-78

Identificadores relacionados

CVE-2026-92398

Produtos afetados

Rg-Ew3000Gx