Ruijie RG-EW1200 and RG-EW300 PRO OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Ruijie RG-EW1200 and RG-EW300 PRO devices. This vulnerability allows authenticated remote attackers to execute arbitrary system commands by sending specially crafted POST requests to a vulnerable Lua service. The issue is present in the RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208 and RG-EW300 PRO ReyeeOS219 versions.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the 'module_set' endpoint in the '/usr/local/lua/dev_config/config_retain.lua' file. The request must be crafted to include the desired commands for execution.