Unrestricted File Upload in Ruijie RG-UAC

Executive Summary

This vulnerability exists in Ruijie RG-UAC up to version 1.0-R1.8.2.p5, specifically in an unknown function within the file user_auth_commit.php. It involves manipulation of the argument upload_image, which allows an attacker to perform an unrestricted file upload.

The attack can be carried out remotely, meaning an attacker does not need physical access to the system to exploit this vulnerability. Additionally, the exploit has been made public, increasing the risk of it being used maliciously.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to upload files without restriction, which can lead to several security issues.

• Remote attackers could upload malicious files, potentially leading to unauthorized code execution.
• It could result in compromise of the affected system's integrity, confidentiality, and availability.
• Since the exploit is public, the risk of exploitation is higher, increasing the likelihood of attacks.

Useful 0 Not Useful 0