High · published December 12, 2025
⚡ A crafted POST request could enable attackers to execute any command they wish on your Ruijie RG-BCR RG-BCR860 device! 🔥 Imagine your wireless network is a restaurant kitchen, where a sneaky chef slips in a note to the cook that gives them secret instructions—no one checks the orders, and chaos ensues! With this OS Command Injection vulnerability, an attacker could gain complete control of your device, potentially altering configurations, accessing sensitive data, or even launching further attacks. This breach could lead to devastating consequences for your network security and integrity.
Imagine your wireless network is a restaurant kitchen, where a sneaky chef slips in a note to the cook that gives them secret instructions—no one checks the orders, and chaos ensues! This vulnerability resides in the action_wireless endpoint of the wireless.lua file, allowing attackers to inject arbitrary commands through a malicious POST request without proper validation.
With this OS Command Injection vulnerability, an attacker could gain complete control of your device, potentially altering configurations, accessing sensitive data, or even launching further attacks. This breach could lead to devastating consequences for your network security and integrity. To protect against this vulnerability, patch your Ruijie RG-BCR RG-BCR860 to the latest firmware immediately. Additionally, review access controls and consider implementing request validation to ensure only safe commands can be processed. You've got this! With the right steps, you can secure your device and keep your network safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| ruijie/rg-bcr860_firmware | all versions | — |