Ruijie M18 and RG-EW1200R OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Ruijie Networks M18 and RG-EW1200R devices, specifically in the M18 EW_3.0(1)B11P226_M18_10223116 version and RG-EW1200R ReyeeOS301. This vulnerability allows authenticated remote attackers to execute arbitrary system commands by sending specially crafted POST requests to the module_get endpoint in the /usr/local/lua/dev_sta/networkConnect.lua file.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the module_get endpoint in the /usr/local/lua/dev_sta/networkConnect.lua file, including a payload that exploits the command injection flaw. This can be done using a tool like curl or Postman, or through a custom script that automates the process.