CVE-2025-56088

The Ruijie RG-BCR RG-BCR860 cloud router is affected by an OS Command Injection vulnerability. The root cause is unvalidated input to the action_service function located in the file /usr/lib/lua/luci/controller/admin/service.lua. An attacker can exploit this by sending a crafted POST request to e...

CVE-2025-56077

The Ruijie RG-RAP2200(E) wireless access point (version 247 2200 ) is vulnerable to an OS Command Injection vulnerability. An attacker can execute arbitrary commands by sending a crafted POST request to the module_set function within the /usr/local/lua/dev_sta/nbr_cwmp.lua file. This flaw origina...

CVE-2025-56091

The Ruijie RG-EW1800GX wireless router, specifically version B11P226_EW1800GX_10223121 , is vulnerable to an OS Command Injection vulnerability. The root cause is an unvalidated input to the module_set function within the file /usr/local/lua/dev_config/config_retain.lua. An attacker can exploit t...

CVE-2025-56117

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is vulnerable to an OS Command Injection vulnerability. The flaw originates from the improper handling of a specially crafted POST request directed at the module_set parameter within the file /usr/local/lua/dev_sta/nbr_cwmp.lu...

CVE-2025-56098

The Ruijie X30-PRO home wireless router (version X30-PRO-V1_09241521 ) is susceptible to an OS Command Injection vulnerability. The flaw exists in the module_get function within the file /usr/local/lua/dev_sta/networkConnect.lua due to unvalidated input . An attacker can exploit this by sending a...

CVE-2025-56108

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request directed at the pwdmodify function within the /usr/lib/lua/luci/modules/common.lua file. This...

CVE-2025-56124

The Ruijie X60 PRO (models X60_10212014RG-X60 PRO) versions V1.00 through V2.00 are susceptible to an OS Command Injection vulnerability. The flaw exists in the module_get function located in the file /usr/local/lua/dev_sta/networkConnect.lua. An attacker can exploit this by sending a crafted POS...

CVE-2025-56102

The Ruijie RG-EW1800GX wireless router is susceptible to an OS Command Injection vulnerability (CWE-78) in the B11P226_EW1800GX_10223121 firmware version. The root cause is unverified input processed by the module_get function located in the /usr/local/lua/dev_sta/networkConnect.lua file. An atta...

CVE-2025-56092

OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

PT-2025-50662

Name of the Vulnerable Software and Affected Versions Ruijie X30 PRO V1 X30-PRO-V1 09241521 Description An issue exists in Ruijie X30 PRO V1 X30-PRO-V1 09241521 that allows attackers to execute arbitrary commands. This is possible through a crafted POST request to the module get function within t...

CVE-2025-56094

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/hostaccessdelay.lua...

Ruijie RG-YST 安全漏洞

Ruijie RG-YST is a series of wireless bridges from China Ruijie Ruijie. A security vulnerability exists in the Ruijie RG-YST YSTAP3.01B11P280YST250F V1.xxV2.xx version, which originates from mishandling of a specially crafted POST request for pwdmodify in the file...

CVE-2025-56095

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56098

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

EUVD-2025-202747

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

PT-2025-50677

Name of the Vulnerable Software and Affected Versions Ruijie X30-PRO version X30-PRO-V1 09241521 Description An OS Command Injection issue exists in Ruijie X30-PRO version X30-PRO-V1 09241521. Attackers can execute arbitrary commands by sending a specially crafted POST request to the pwdmodify...

PT-2025-50659

Name of the Vulnerable Software and Affected Versions Ruijie M18 EW versions 3.01B11P226 M18 10223116 Description An issue exists that allows attackers to execute arbitrary commands. This can be achieved by sending a specially crafted POST request to the module set component within the file...

Ruijie RG-BCR 安全漏洞

Ruijie RG-BCR is a series of cloud routers from China Ruijie Ruijie. A security vulnerability exists in the Ruijie RG-BCR RG-BCR860 version, which stems from improper handling of a specially crafted POST request for actionwireless in the file /usr/lib/lua/luci/control/admin/wireless.lua, which...

Ruijie RG-BCR 安全漏洞

Ruijie RG-BCR is a series of cloud routers from China Ruijie Ruijie. A security vulnerability exists in the Ruijie RG-BCR RG-BCR860 version, which stems from improper handling of a specially crafted POST request for networksetwanconf in the file /usr/lib/lua/luci/controller/admin/netport.lua, whi...

CVE-2025-56084: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...