Ruijie RG-EW1800GX PRO and RG-EW300N OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 and RG-EW300N ReyeeOS300. This vulnerability allows authenticated remote attackers to execute arbitrary commands on the affected device by sending specially crafted POST requests to the module_set in the file /usr/local/lua/dev_config/config_retain.lua.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the module_set endpoint in the file /usr/local/lua/dev_config/config_retain.lua. The request must be crafted to include the desired commands for execution.