CVE-2025-56083

HIGH · 8.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.

Vendors

Ruijie

Affected products

Rg-yst250f Firmware Rg-yst250f Rg-est310 V2 Firmware Rg-est310 V2 Reyee Os Rg-est350 V2 Rg-ew300 Pro Rg-eap602 Firmware Rg-eap602

References

1drv.ms
1drv.ms
github.com