Ruijie Rg-Uac Firmware vulnerabilities

6 CVEs affecting Ruijie Rg-Uac Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6269, published 2024-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-6269, published 2024-06-23. High severity, CVSS 7.2. EPSS: 20.6% chance of exploitation in the next 30 days. A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the…
CVE-2024-6184, published 2024-06-20. Critical severity, CVSS 9.8. EPSS: 9.7% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/reboot/reboot_commit.php. The…
CVE-2024-6185, published 2024-06-20. High severity, CVSS 8.8. EPSS: 9.1% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function get_ip_addr_details of the file /view/dhcp/dhcpConfig/commit.php. The…
CVE-2024-6186, published 2024-06-20. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument…
CVE-2024-6187, published 2024-06-20. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument…
CVE-2020-21627, published 2021-11-16. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /current_action.php?action=reboot, which allows attackers to cause a denial of service (DoS) via unspecified…