PT-2025-42218 · Ruijie · Rg-Uac Application Management Gateway

Published 2025-10-15 · Updated 2025-11-21 · CVE-2023-7304

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC Application Management Gateway (affected versions not specified)

Description The Ruijie RG-UAC Application Management Gateway contains a command injection issue through the nmc sync.php interface. An unauthenticated attacker who can access the affected endpoint can inject shell commands via manipulated request data, potentially allowing the execution of arbitrary commands on the host system. Successful exploitation could grant full control of the application process and, depending on service privileges, may lead to system-level access. The Rondo botnet has been observed targeting this issue. The vulnerable endpoint is /nmc sync.php.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-7304

Affected Products

Rg-Uac Application Management Gateway

References · 8

• 🔥 https://cn-sec.com/archives/2284248.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7304 · Security Note
• https://t.me/cveNotify/143616 · Telegram Post
• https://vulncheck.com/advisories/ruijie-rg-uac-nmc-sync-php-command-injection · Note
• https://t.me/CVEtracker/34929 · Telegram Post
• https://t.me/cveNotify/138776 · Telegram Post
• https://twitter.com/CVEnew/status/1978562106002674154 · Twitter Post
• https://twitter.com/CveFindCom/status/1978282094246637969 · Twitter Post