High · published December 8, 2025
⚡ An authenticated user can execute appended shell commands as root on Ruijie APs! Sounds wild, right? 😱 Think of this vulnerability like a restaurant where a customer can add secret ingredients to their order without the chef checking — if they know the right phrases, they can concoct a dish that disrupts the entire kitchen! This is absolutely devastating because it could allow an attacker to access sensitive files, disrupt device operations, and even pivot to other parts of the network. Just imagine a rogue diner not only messing up their own meal but also causing chaos for everyone around them!
Think of this vulnerability like a restaurant where a customer can add secret ingredients to their order without the chef checking — if they know the right phrases, they can concoct a dish that disrupts the entire kitchen! In this case, the vulnerability lets authenticated users append arbitrary shell expressions via the command parameter to the web_action.do endpoint, granting them root access and control over the device.
This is absolutely devastating because it could allow an attacker to access sensitive files, disrupt device operations, and even pivot to other parts of the network. Just imagine a rogue diner not only messing up their own meal but also causing chaos for everyone around them! Immediately patch your Ruijie AP to the latest version to mitigate this risk. Review user permissions to ensure only trusted individuals have access to command parameters. Consider implementing additional monitoring to detect unusual activity on your network. 🔒 You've got this! Stay proactive, and you'll keep your network safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| ruijie/rg-ap720-l_firmware | ≥ 11.1.0, ≤ 11.1\(9\)B1P21 | — |