High · published December 12, 2025
⚡ A sneaky OS command injection vulnerability just popped up in the Ruijie RG-EW1800GX! An attacker can execute arbitrary commands with a cleverly crafted POST request. 🔥 Think of this like a restaurant where the chef blindly trusts any special order without checking the details — one wrong dish could lead to an absolute disaster in the kitchen! An attacker could gain access to the system and execute commands that can compromise data integrity, modify configurations, or even take control of the device entirely. This could lead to unauthorized access and potentially devastating consequences for network security.
Think of this like a restaurant where the chef blindly trusts any special order without checking the details — one wrong dish could lead to an absolute disaster in the kitchen! This OS command injection vulnerability in Ruijie's RG-EW1800GX arises when the system processes user input in the module_set function of the nbr_cwmp.lua file, allowing malicious users to run arbitrary commands.
An attacker could gain access to the system and execute commands that can compromise data integrity, modify configurations, or even take control of the device entirely. This could lead to unauthorized access and potentially devastating consequences for network security. Patch the device firmware to the latest version as soon as it becomes available to mitigate this risk. Additionally, audit the input validation on POST requests to ensure they are properly sanitized and restrict any potentially dangerous commands. You've got this! By following these steps, you'll fortify your defenses and keep your network secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| ruijie/rg-ew1800gx_firmware | all versions | — |
| ruijie/rg-est350_firmware | all versions | — |