CVE-2025-56099

HIGH · 8.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

Vendors

Ruijie

Affected products

Rg-yst250f Firmware Rg-yst250f Rg-est310 V2 Firmware Rg-est310 V2 Reyee Os Rg-est350 V2 Rg-ew300 Pro Rg-eap602 Firmware Rg-eap602

References

1drv.ms
1drv.ms
github.com