An OS command injection vulnerability in the Ruijie RG-EW1800GX router allows authenticated remote attackers to achieve full system compromise.

This is an OS command injection flaw located in the /usr/local/lua/dev_config/config_retain.lua file, which fails to properly sanitize input provided to the module_set function. The CVSS vector (PR:L) indicates that the attacker must possess low-level administrative or user credentials to trigger this vulnerability.

The ability to execute arbitrary commands on network infrastructure poses a severe risk to organizational security, potentially allowing an attacker to intercept traffic, pivot into internal network segments, or permanently disable critical connectivity. With a CVSS score of 8.8, this vulnerability is classified as High, representing a significant threat to confidentiality, integrity, and availability of the affected device.

Immediate Action: Restrict access to the management interface to trusted administrative IP addresses only, and contact the vendor to obtain the necessary firmware update to resolve the command injection flaw.

Proactive Monitoring: Monitor device access logs for suspicious POST requests targeting the module_set endpoint and investigate any unauthorized configuration changes or unexpected outbound network traffic from the router.

Compensating Controls: Implement a Web Application Firewall or network-level access control list to block unauthorized access to the router management interface, effectively limiting the attack surface.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the security researcher's report on GitHub.

Given the potential for complete device compromise and the availability of technical details regarding the exploit, administrators should prioritize securing the management interface of the affected Ruijie hardware. Apply vendor-provided patches as soon as they become available and ensure that administrative access is restricted to authorized personnel only to mitigate the risk of unauthorized command execution.