Ruijie Networks AP180 Series OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in the Ruijie Networks AP180 series access points, specifically in firmware versions prior to AP_RGOS 11.9(4)B1P8. This vulnerability allows logged-in users with administrative privileges to execute arbitrary OS commands on the affected devices.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of OS commands with administrative privileges on the affected access points.

Remediation

Users are advised to update the firmware to version AP_RGOS 11.9(4)B1P8 or later. If the update cannot be applied, it is recommended to restrict web access to trusted source IP addresses using ACL or whitelist configurations.