CNNVD-202512-2118 Information

CNNVD ID

CNNVD-202512-2118

CVE-2025-56130

  • CNNVD Published: 2025-12-11

Description (Chinese)

Ruijie RG-S1930是中国锐捷(Ruijie)公司的一系列二层网络管理型交换机。 Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230版本存在安全漏洞,该漏洞源于对文件/usr/local/lua/dev_config/ace_sw.lua中module_update的特制POST请求处理不当,可能导致执行任意命令。

Description (English)

Ruijie RG-S 1930 is a series of second-tier network management switches for Ruijie. Ruijie RG-S 1930 S 1930 SWTCH 3.0(1) version B11P230 has a security loophole, which stems from the mishandling of the specially designed POST request in document/usr/local/lua/dev config/ace sw.lua module update, which may result in the execution of arbitrary orders.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

锐捷

Published

2025-12-11

Last Modified

2026-02-24

References

https://1drv.ms/f/c/12406a392c92914b/EpWU9cQdd5RNszcYlTj2cGsBfiClkCwF0zCsLNYer2VIZA?e=ANIgPM https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56130.md

Share on: