CVE-2025-11141

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

Ruijie NBR2100G-E 操作系统命令注入漏洞

The Ruijie NBR2100G-E is a gateway routing device from China Ruijie Ruijie. An OS command injection vulnerability exists in Ruijie NBR2100G-E 20250919 and earlier versions, which stems from an incorrect operation of the parameter city in the file /itboxpi/branchpassw.php, which could lead to remo...