Rg-bcr860 Firmware vulnerabilities
6 known vulnerabilities in Rg-bcr860 Firmware from Ruijie. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Rg-bcr860 Firmware: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua.
- 8.8 High severity
Rg-bcr860 Firmware: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wan_conf in file /usr/lib/lua/luci/controller/admin/netport.lua.
- 8.8 High severity
Rg-bcr860 Firmware: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in file /usr/lib/lua/luci/controller/api/rcmsAPI.lua.
- 8.8 High severity
Rg-bcr860 Firmware: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in file /usr/lib/lua/luci/control/admin/wireless.lua.
- 8.8 High severity
Rg-bcr860 Firmware: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file /usr/lib/lua/luci/controller/admin/service.lua.
- 7.2 High severity
RG-BCR860: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The expl