CVE-2025-56124

HIGH · 7.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

Vendors

Ruijie

Affected products

Rg-x60 Pro Firmware Rg-x60 Pro Rg-ew1200 Firmware Rg-ew1200

References

1drv.ms
1drv.ms
github.com