216.73.216.170

CVE-2025-56122

· Published 11/12/2025 19:15 · Modified 23/12/2025 15:35

Labels: CVE-2025-56122 2025-12-11CVE-2025-56122[email protected]

Essential information

Published
11/12/2025 19:15
Modified
23/12/2025 15:35
Author
Creator
CVSS
8.8 HIGH (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS metrics

Description

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

NVD status

Status
Analyzed — CVE has had analysis completed and all data associations made.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
ruijie / rg-ew1800gx firmware cpe:2.3:o:ruijie:rg-ew1800gx_firmware:3.0\(1\)b11p226:*:*:*:*:*:*:*
ruijie / rg-ew1800gx cpe:2.3:h:ruijie:rg-ew1800gx:-:*:*:*:*:*:*:*
ruijie / rg-ew300n firmware cpe:2.3:o:ruijie:rg-ew300n_firmware:3.0\(1\)b11p300:*:*:*:*:*:*:*
ruijie / rg-ew300n cpe:2.3:h:ruijie:rg-ew300n:-:*:*:*:*:*:*:*
ruijie / rg-ew1800gx pro firmware cpe:2.3:o:ruijie:rg-ew1800gx_pro_firmware:1.022.3117:*:*:*:*:*:*:*
ruijie / rg-ew1800gx pro cpe:2.3:h:ruijie:rg-ew1800gx_pro:-:*:*:*:*:*:*:*

References