Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：339320）

Rule General Information


Release Date:		2025-07-30

Rule Name:		Ruijie SSL VPN Authentication Bypass Vulnerability

Severity:

CVE ID:

Rule Protection Details


Description:		Ruijie SSL VPN provides remote users with end-to-end encrypted access experience of one key access, fine-grained authorization and full audit through browser zero client or virtual network card security tunnel. Ruijie SSL VPN has an authentication bypass vulnerability, which allows attackers to obtain administrator authentication credentials.

Impact:		An unauthorized remote attacker can bypass authentication and gain access to the application with specially crafted requests.

Affected OS:		Windows, Linux, Others

Reference:

Solutions

Please contact the software vendor to update the software patch.