CVE-2025-56084

HIGH · 8.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

Vendors

Ruijie

Affected products

Rg-yst250f Firmware Rg-yst250f Rg-est310 V2 Firmware Rg-est310 V2 Reyee Os Rg-est350 V2 Rg-ew300 Pro Rg-eap602 Firmware Rg-eap602

References

1drv.ms
1drv.ms
github.com