CVE-2025-56108

HIGH · 8.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

Vendors

Ruijie

Affected products

X30 Pro Firmware X30 Pro Rg-eap602 Firmware Rg-eap602 Rg-est350 Firmware Rg-est350 Rg-ew300 Pro Firmware Rg-ew300 Pro Rg-est310 Firmware Rg-est310

References

1drv.ms
1drv.ms
github.com