CNNVD-202512-2118 Information
CNNVD ID
CNNVD-202512-2118
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
Ruijie RG-S1930是中国锐捷(Ruijie)公司的一系列二层网络管理型交换机。 Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230版本存在安全漏洞,该漏洞源于对文件/usr/local/lua/dev_config/ace_sw.lua中module_update的特制POST请求处理不当,可能导致执行任意命令。
Description (English)
Ruijie RG-S 1930 is a series of second-tier network management switches for Ruijie. Ruijie RG-S 1930 S 1930 SWTCH 3.0(1) version B11P230 has a security loophole, which stems from the mishandling of the specially designed POST request in document/usr/local/lua/dev config/ace sw.lua module update, which may result in the execution of arbitrary orders.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
锐捷
Published
2025-12-11
Last Modified
2026-02-24
References
https://1drv.ms/f/c/12406a392c92914b/EpWU9cQdd5RNszcYlTj2cGsBfiClkCwF0zCsLNYer2VIZA?e=ANIgPM https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56130.md
Share on: