Ruijie RG-EW1800GX and RG-EW300R OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in Ruijie RG-EW1800GX and RG-EW300R devices. This vulnerability allows authenticated remote attackers to execute arbitrary commands on the device by sending specially crafted POST requests to a vulnerable Lua service. The issue arises in the 'networkConnect.lua' file, within the 'module_get' function.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the 'module_get' endpoint of the vulnerable device's Lua service. The request must be crafted to include the desired command for execution. This can be done using a tool like curl or Postman, or through a custom script that automates the process.