Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2025/12/12 1:06 a.m.•17 views

CVE-2025-56130

OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...

8.8CVSS6.6AI score0.02071EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/11 7:15 p.m.•20 views

CVE-2025-56130

OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...

8.8CVSS6.6AI score0.02071EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/11 7:15 p.m.•24 views

CVE-2025-56130

OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...

8.8CVSS0.02071EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/11 12:00 a.m.•45 views

CVE-2025-56130

The Ruijie RG-S1930 network management switch, specifically version S1930SWITCH_3.0(1)B11P230 , is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the module_update function within the file /usr/local/lua/dev_con...

8.8CVSS6.6AI score0.02071EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/11 12:00 a.m.•7 views

CVE-2025-56130

OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...

6.6AI score0.02071EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•28 views

Ruijie RG-S1930 security vulnerability

The Ruijie RG-S1930 is a series of Layer 2 network management switches from Ruijie China. A security vulnerability exists in the Ruijie RG-S1930 S1930SWITCH3.01B11P230 version, which originates from improper handling of a specially crafted POST request for moduleupdate in the file...

8.8CVSS6.1AI score0.02071EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•25 views

PT-2025-50691

Name of the Vulnerable Software and Affected Versions Ruijie RG-S1930 versions S1930SWITCH 3.01B11P230 Description An OS Command Injection issue exists in Ruijie RG-S1930. Successful exploitation allows attackers to execute arbitrary commands. This is achieved by sending a crafted POST request to...

8.8CVSS6.5AI score0.02071EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•7 views

CVE-2025-56130: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...

8.8CVSS6.6AI score0.02071EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/08/17 12:00 a.m.•71 views

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

9.3AI score0.02582EPSS
SaveExploits1References1
CVE
CVE
•added 2023/08/17 12:00 a.m.•139 views

CVE-2023-38902

CVE-2023-38902 describes a command injection in Ruijie RG-EW/RG-NBS/RG-S1930/RG-EG/EAP/RAP/NBC devices. Affected are RG-EW series (EW 3.0(1)B11P219), RG-NBS/S1930 (3.0(1)B11P219), RG-EG (3.0(1)B11P219), EAP/RAP (3.0(1)B11P219), and NBC controllers (AC 3.0(1)B11P219). The root cause is a vulnerabi...

8.8CVSS8.3AI score0.02582EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/17 12:00 a.m.•8 views

CVE-2023-38902: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

8.8CVSS8.5AI score0.02582EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/31 2:15 p.m.•92 views

CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

9.8CVSS9.8AI score0.01814EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•13 views

CVE-2023-34644: Improper Control of Generation of Code

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

9.8CVSS8.8AI score0.01814EPSS
SaveExploits0References2
CVE
CVE
•added 2023/07/31 12:00 a.m.•2809 views

CVE-2023-34644

CVE-2023-34644 is a remote code execution vulnerability in Ruijie Networks products. A crafted POST to /cgi-bin/luci/api/auth allows unauthorized remote attackers to gain the highest privileges. Affected products and versions include Ruijie RG-EW series (EW_3.0(1)B11P204), RG-NBS and RG-S1930 ser...

9.8CVSS8.6AI score0.01814EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder