CVE-2025-56090

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56094

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/hostaccessdelay.lua...

CVE-2025-56085: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-EW1200 EW3.01B11P227EW120011130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56091

The Ruijie RG-EW1800GX wireless router, specifically version B11P226_EW1800GX_10223121 , is vulnerable to an OS Command Injection vulnerability. The root cause is an unvalidated input to the module_set function within the file /usr/local/lua/dev_config/config_retain.lua. An attacker can exploit t...

CVE-2025-56079

The Ruijie RG-EW1300G wireless router (versions V1.00/V2.00/V4.00 ) is susceptible to an OS Command Injection vulnerability. The root cause is located in the module_get function within the file /usr/local/lua/dev_sta/networkConnect.lua. An attacker can execute arbitrary commands by sending a craf...

CVE-2025-56127

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the getwanobj in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-56094

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is susceptible to an OS Command Injection vulnerability. The flaw exists because the module_get function in the file /usr/local/lua/dev_sta/host_access_delay.lua fails to validate input properly. An attacker can exploit this b...

CVE-2025-56099

The Ruijie RG-YST AP (version 3.0(1)B11P280YST250F ) is susceptible to an OS Command Injection vulnerability. The root cause is an unvalidated input within the pwdmodify function located in the file /usr/lib/lua/luci/modules/common.lua. An attacker can exploit this by sending a crafted POST reque...

CVE-2025-56108

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request directed at the pwdmodify function within the /usr/lib/lua/luci/modules/common.lua file. This...

CVE-2025-56113: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP3.01B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

CVE-2025-56113

OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP3.01B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

CVE-2025-56113

An OS Command Injection vulnerability exists in the Ruijie RG-YST wireless bridge series (specifically models RG-YST EST and YSTAP_3.0(1)B11P280YST250F ) running versions V1.xxV2.xx . The root cause is the mishandling of a specially crafted POST request to the pwdmodify function located in the fi...

CVE-2025-56095: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56093

The Ruijie X30-PRO home wireless router, specifically version X30-PRO-V1_09241521 , is vulnerable to an OS Command Injection vulnerability. The flaw exists in the setWisp function within the file /usr/lib/lua/luci/modules/wireless.lua due to unvalidated input . An attacker can exploit this by sen...

CVE-2025-56095

The Ruijie RG-EW1200G PRO wireless router (versions V1.00, V2.00, V3.00, and V4.00 ) is vulnerable to an OS Command Injection flaw. The root cause is an unverified input in the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. An attacker can exploit this by sending a craft...

CVE-2025-56093: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua...

CVE-2025-56077: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-RAP2200E 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56083: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrnetworkIdmerge.lua...

CVE-2025-56107: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submitwifi in file /usr/lib/lua/luci/controller/admin/commonquickconfig.lua...