CNNVD-202509-4416 Information
Sep 29, 2025
cve
CNNVD ID
CNNVD-202509-4416
Related CVE
- CNNVD Published: 2025-09-29
Description (Chinese)
Ruijie NBR2100G-E是中国锐捷（Ruijie）公司的一个网关路由设备。 Ruijie NBR2100G-E 20250919及之前版本存在操作系统命令注入漏洞，该漏洞源于对文件/itbox_pi/branch_passw.php中参数city的错误操作，可能导致远程os命令注入。
Description (English)
Ruijie NBR 2100G-E is a gateway to Ruijie in China. Ruijie NBR2100G-E 20250919 and previous versions had a bug in the operating system commands, which stemmed from an error in the operation of parameter city in file/itbox pi/branch passw.php, which could lead to a remote Os command injection.
Hazard Level
High
Vulnerability Type
操作系统命令注入
Affected Vendor
锐捷
Published
2025-09-29
Last Modified
2026-02-24
References
https://github.com/DavCloudz/cve/issues/2 https://vuldb.com/?ctiid.326218 https://vuldb.com/?id.326218 https://vuldb.com/?submit.658695
Share on: