Ruijie M18 and RG-EW300 PRO OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Ruijie Networks M18 and RG-EW300 PRO devices running specific firmware versions. This vulnerability allows authenticated remote attackers to execute arbitrary commands on the affected system by sending specially crafted POST requests to a vulnerable Lua service.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the 'module_set' endpoint in the '/usr/local/lua/dev_sta/nbr_cwmp.lua' file. The request must be crafted to include the desired commands for execution.