CVE-2025-56118

HIGH · 8.8 CVSS Gepubliceerd: 11-12-2025 CWE-78

Beschrijving

OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

Vendors

Ruijie

Affected products

Rg-ew3200gx Firmware Rg-ew3200gx Rg-x60 Pro Firmware Rg-x60 Pro

References

1drv.ms
1drv.ms
github.com