CloudMap 漏洞情报库

高危2023/10/20

RG-UAC Ruijie - Password Hashes Leak

Multiple Firewall Devices from vendor Ruijie Networks are affected by an information leakage vulnerability where credentials are included in the source code of the web admin login interface (usernames, roles, MD5 hashes and additional details of each user). Attackers can use this information to illegally access into the vulnerable devices, obtain sensitive device information and change configurations. The vulnerability is identified by CNVD-2021-14536.

RG-UACPoC 已收录

CVSS—

严重2023/05/23

Ruijie RG-UAC nmc_sync.php - Remote Code Execution

There is a command execution vulnerability in the nmc_sync.php interface of Ruijie's RG-UAC unified online behavior management and audit system. An unauthenticated attacker can execute arbitrary commands to control server permissions.

RG-UACPoC 已收录RCE

CVSS—

高危CNVD-2021-145362021/07/12

Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information Disclosure

Ruijie RG-UAC Unified Internet Behavior Management Audit System is susceptible to information disclosure. Attackers could obtain user accounts and passwords by reviewing the source code of web pages, resulting in the leakage of administrator user authentication information.

RG-UACPoC 已收录

CVSS8.3

RG-UAC

关联漏洞

RG-UAC Ruijie - Password Hashes Leak

Ruijie RG-UAC nmc_sync.php - Remote Code Execution

Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information Disclosure