CVE-2024-5337

Summary

CVE-2024-5337 is a critical vulnerability affecting Ruijie RG-UAC up to version 20240516. This issue arises from the processing of the file /view/systemConfig/sys_user/user_commit.php and allows an attacker to inject OS commands via the argument email2/user_name. The exploit can be initiated remotely and the associated identifier is VDB-266243. Although the vendor was notified early about the disclosure, they have not responded or taken action. This vulnerability is now publicly known and could be exploited by attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.