漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php
Vulnerability Description
Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of file type, path, or extension. A remote attacker can upload a crafted PHP file and then access it from the web root, resulting in arbitrary code execution in the context of the web service. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-14 UTC.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Ruijie NBR Router 安全漏洞
Vulnerability Description
Ruijie NBR Router是中国锐捷（Ruijie）公司的一款无线路由器。 Ruijie NBR Router存在安全漏洞，该漏洞源于未经验证的文件上传功能，可能导致任意代码执行。
CVSS Information
N/A
Vulnerability Type
N/A