{"id":"CVE-2024-4813","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-4813","generatedAt":"2026-10-28T03:22:28.763Z","title":"A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506.","description":"A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physicalInterface/interface_commit.php. The manipulation of the argument name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-263934 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","published":"2024-05-14T15:45:03.000Z","lastModified":"2026-06-17T08:02:59.000Z","status":"Analyzed","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-78"],"affected":["ruijie/rg-uac 6000-cc firmware","ruijie/rg-uac 6000-e10 firmware","ruijie/rg-uac 6000-e10c firmware","ruijie/rg-uac 6000-e20 firmware","ruijie/rg-uac 6000-e20c firmware","ruijie/rg-uac 6000-e20m firmware","ruijie/rg-uac 6000-e50 firmware","ruijie/rg-uac 6000-e50c firmware","ruijie/rg-uac 6000-e50m firmware","ruijie/rg-uac 6000-ea firmware","ruijie/rg-uac 6000-ei firmware","ruijie/rg-uac 6000-isg02 firmware","ruijie/rg-uac 6000-isg10 firmware","ruijie/rg-uac 6000-isg200 firmware","ruijie/rg-uac 6000-isg40 firmware","ruijie/rg-uac 6000-si firmware","ruijie/rg-uac 6000-u3100 firmware","ruijie/rg-uac 6000-u3210 firmware","ruijie/rg-uac 6000-x100 firmware","ruijie/rg-uac 6000-x100s firmware","ruijie/rg-uac 6000-x20 firmware","ruijie/rg-uac 6000-x200 firmware","ruijie/rg-uac 6000-x20m firmware","ruijie/rg-uac 6000-x20me firmware","ruijie/rg-uac 6000-x300d firmware","ruijie/rg-uac 6000-x60 firmware","ruijie/rg-uac 6000-xs firmware"],"epss":{"score":0.06414,"percentile":0.93644,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (6.41%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/h0e4a0r1t/I_L-HxK-pF-uZ1-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-physicalInterface%3Ainterface_commit.php.pdf","tags":["Broken Link"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.263934","tags":["Permissions Required","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.263934","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.330020","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://github.com/h0e4a0r1t/I_L-HxK-pF-uZ1-/blob/main/Ruijie%20RG-UAC%20Unified%20Internet%20Behavior%20Management%20Audit%20System%20Backend%20RCE%20Vulnerability-physicalInterface%3Ainterface_commit.php.pdf","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?ctiid.263934","tags":["Permissions Required","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?id.263934","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?submit.330020","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-4813","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}