CVE-2025-56752: Improper Authentication

A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...

CVE-2025-56752

A vulnerability exists in the Ruijie RG-ES series switch firmware, specifically version ESW_1.0(1)B1P39 . The root cause is a complete bypass of the authentication mechanism , which allows remote attackers to send a crafted HTTP POST request to the /user.cgi endpoint. Successful exploitation gran...