CVE-2024-4814 exposes a critical OS command injection vulnerability in Ruijie RG-UAC devices. This vulnerability, affecting versions up to 20240506, resides in the /view/networkConfig/RouteConfig/StaticRoute/static_route_edit_commit.php file. By manipulating the oldipmask or oldgateway arguments, attackers can execute arbitrary commands on the underlying operating system. Despite a CVSS score of 6.3, the SVRS score of 30 indicates a lower level of immediate threat compared to the most critical vulnerabilities, but still warrants attention and monitoring. This remotely exploitable flaw is publicly known and actively discussed, heightening the risk of exploitation. Organizations using Ruijie RG-UAC should investigate and apply available patches or mitigations to prevent unauthorized system access and maintain network security. The lack of vendor response compounds the need for users to take proactive steps.