PT-2026-49148 · Ruijie · Eg105G-P
CVSS v2.0
8.3
High
| Vector | AV:N/AC:L/Au:M/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Ruijie EG105G-P version 2.340
Description
An issue exists in the JSON-RPC Diagnose Endpoint component where the
nslookup() function within the '/cgi-bin/luci/api/diagnose' endpoint is susceptible to command injection. This occurs when the params.target argument is manipulated, allowing a remote attacker to execute arbitrary commands on the system.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Special Elements Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Eg105G-P