CVE-2025-56106

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

CVE-2025-56102

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

CVE-2025-56099

The Ruijie RG-YST AP (version 3.0(1)B11P280YST250F ) is susceptible to an OS Command Injection vulnerability. The root cause is an unvalidated input within the pwdmodify function located in the file /usr/lib/lua/luci/modules/common.lua. An attacker can exploit this by sending a crafted POST reque...

CVE-2025-56109

The Ruijie RG-BCR RG-BCR860 cloud router is vulnerable to an OS Command Injection vulnerability. The flaw exists in the /usr/lib/lua/luci/control/admin/wireless.lua file, where improper handling of a specially crafted POST request to the action_wireless endpoint allows an attacker to execute arbi...

CVE-2025-56106

The Ruijie RG-EW1800GX wireless router (version B11P226_EW1800GX_10223121 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request sent to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. Suc...

CVE-2025-56102

The Ruijie RG-EW1800GX wireless router is susceptible to an OS Command Injection vulnerability (CWE-78) in the B11P226_EW1800GX_10223121 firmware version. The root cause is unverified input processed by the module_get function located in the /usr/local/lua/dev_sta/networkConnect.lua file. An atta...

CVE-2025-56127

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the getwanobj in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-56129

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the actiondiagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua...

CVE-2025-56123

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

CVE-2025-56130

The Ruijie RG-S1930 network management switch, specifically version S1930SWITCH_3.0(1)B11P230 , is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the module_update function within the file /usr/local/lua/dev_con...

CVE-2025-56129

The Ruijie RG-BCR RG-BCR860 cloud router is susceptible to an OS Command Injection vulnerability. The flaw exists in the action_diagnosis endpoint within the file /usr/lib/lua/luci/controller/admin/diagnosis.lua. Attackers can exploit this by sending a crafted POST request to execute arbitrary co...

CVE-2025-56123

The Ruijie RG-EW1200G PRO wireless router (versions V1.00 through V4.00 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the module_get function within the /usr/local/lua/dev_sta/networkConnect.lua file. Succ...

EUVD-2025-202743

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the actionservice in file /usr/lib/lua/luci/controller/admin/service.lua...

EUVD-2025-202744

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the runtcpdump in file /usr/lib/lua/luci/controller/admin/commontcpdump.lua...

EUVD-2025-202745

OS Command Injection vulnerability in Ruijie RG-EW1200 EW3.01B11P227EW120011130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

EUVD-2025-202747

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226EW1800GX-PRO10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

EUVD-2025-202746

OS Command Injection vulnerability in Ruijie RG-EW1200 EW3.01B11P227EW120011130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

EUVD-2025-202750

OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

PT-2025-50672

Name of the Vulnerable Software and Affected Versions Ruijie RG-YST AP versions 3.01B11P280YST250F Description An OS Command Injection issue exists in Ruijie RG-YST AP. An attacker can execute arbitrary commands by sending a specially crafted POST request to the /usr/lib/lua/luci/modules/common.l...