CVE-2025-56089

OS Command Injection vulnerability in Ruijie M18 EW3.01B11P226M1810223116 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56084

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56117

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56118

OS Command Injection vulnerability in Ruijie X60 PRO X6010212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56117

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56106

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56077

OS Command Injection vulnerability in Ruijie RG-RAP2200E 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56084

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56077

OS Command Injection vulnerability in Ruijie RG-RAP2200E 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

PT-2025-50659

Name of the Vulnerable Software and Affected Versions Ruijie M18 EW versions 3.01B11P226 M18 10223116 Description An issue exists that allows attackers to execute arbitrary commands. This can be achieved by sending a specially crafted POST request to the module set component within the file...

CVE-2025-56084

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56118

The Ruijie X60 PRO home wireless router (versions V1.00 through V2.00 ) is susceptible to an OS Command Injection vulnerability. The flaw exists because the software improperly handles specially crafted POST requests to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. ...

CVE-2025-56084

The Ruijie RG-EW1800GX PRO (versions B11P226 and EW1800GX-PRO 10223117 ) is susceptible to an OS Command Injection vulnerability. The root cause is unverified input to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. An attacker can exploit this by sending a crafted PO...

CVE-2025-56089

The Ruijie M18 WiFi router is susceptible to an OS Command Injection vulnerability in version EW_3.0(1)B11P226_M18_10223116 . The root cause is an unvalidated input passed to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. Attackers can exploit this by sending a craft...

CVE-2025-56117

The Ruijie X30-PRO home wireless router, specifically version X30-PRO-V1 09241521 , is vulnerable to an OS Command Injection vulnerability. The flaw exists in the module_set parameter within the file /usr/local/lua/dev_sta/nbr_cwmp.lua , where improper handling of a specially crafted POST request...