CVE-2025-56108

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

CVE-2025-56118

OS Command Injection vulnerability in Ruijie X60 PRO X6010212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56120

OS Command Injection vulnerability in Ruijie X60 PRO X6010212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56127

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the getwanobj in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-56083

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrnetworkIdmerge.lua...

CVE-2025-56089

OS Command Injection vulnerability in Ruijie M18 EW3.01B11P226M1810223116 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56097

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56098

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

CVE-2025-56082

The Ruijie RG-BCR RG-BCR600W commercial cloud router is susceptible to an OS Command Injection vulnerability (CWE-78). The flaw originates from unvalidated input provided to the check_changes function located in the file /usr/lib/lua/luci/controller/admin/common.lua. An attacker can exploit this ...

CVE-2025-56083

The Ruijie X30-PRO (version X30-PRO-V1 09241521 ) is vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists because the module_set function in the file /usr/local/lua/dev_sta/nbr_networkId_merge.lua fails to properly neutralize input, allowing an attacker to execute arbitra...

CVE-2025-56107

The Ruijie RG-BCR RG-BCR600W cloud router is vulnerable to an OS Command Injection vulnerability. An attacker can execute arbitrary commands by sending a crafted POST request to the submit_wifi function located in the file /usr/lib/lua/luci/controller/admin/common_quick_config.lua. The root cause...

CVE-2025-56110

The Ruijie RG-BCR RG-BCR860 cloud router is susceptible to an OS Command Injection vulnerability. An attacker can execute arbitrary commands by sending a specially crafted POST request to the action_deal_update API endpoint, which resides in the file /usr/lib/lua/luci/controller/api/rcmsAPI.lua. ...

CVE-2025-56109

The Ruijie RG-BCR RG-BCR860 cloud router is vulnerable to an OS Command Injection vulnerability. The flaw exists in the /usr/lib/lua/luci/control/admin/wireless.lua file, where improper handling of a specially crafted POST request to the action_wireless endpoint allows an attacker to execute arbi...

CVE-2025-56106

The Ruijie RG-EW1800GX wireless router (version B11P226_EW1800GX_10223121 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request sent to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. Suc...

CVE-2025-56085

The Ruijie RG-EW1200 wireless router, specifically versions EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 , is susceptible to an OS Command Injection vulnerability. The root cause is unverified input handled by the module_set function in the file /usr/local/lua/dev_config/config_retain.lua. An ...

CVE-2025-56094

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is susceptible to an OS Command Injection vulnerability. The flaw exists because the module_get function in the file /usr/local/lua/dev_sta/host_access_delay.lua fails to validate input properly. An attacker can exploit this b...

CVE-2025-56097

The Ruijie RG-EW1800GX PRO wireless router is vulnerable to an OS Command Injection vulnerability in version B11P226_EW1800GX-PRO_10223117 . The root cause is unvalidated input to the module_set function within the file /usr/local/lua/dev_config/config_retain.lua. Attackers can exploit this by se...

CVE-2025-56111

The Ruijie RG-BCR RG-BCR860 cloud router is vulnerable to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the network_set_wan_conf function located in the file /usr/lib/lua/luci/controller/admin/netport.lua. This flaw allows an...

CVE-2025-56118

The Ruijie X60 PRO home wireless router (versions V1.00/V2.00 ) is vulnerable to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. Exploitation of this ...

CVE-2025-56088

The Ruijie RG-BCR RG-BCR860 cloud router is affected by an OS Command Injection vulnerability. The root cause is unvalidated input to the action_service function located in the file /usr/lib/lua/luci/controller/admin/service.lua. An attacker can exploit this by sending a crafted POST request to e...