CNNVD-202512-2122 Information

CNNVD ID

CNNVD-202512-2122

CVE-2025-56120

  • CNNVD Published: 2025-12-11

Description (Chinese)

Ruijie X60 PRO是中国锐捷(Ruijie)公司的一款家用无线路由器。 Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00V2.00版本存在安全漏洞,该漏洞源于对文件/usr/local/lua/dev_config/config_retain.lua中module_set的特制POST请求处理不当,可能导致执行任意命令。

Description (English)

Ruijie X60 PRO is a homeless router for Ruijie. Ruijie X60 PRO X60 10212014RG-X60 PRO V1.00V2.00 has a security loophole, which stems from the improper handling of the specialized POST request for Modeule set in document/usr/local/lua/dev config/config retain.lua, which may result in the execution of arbitrary orders.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

锐捷

Published

2025-12-11

Last Modified

2026-02-24

References

https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh https://1drv.ms/t/c/12406a392c92914b/EZf6v9BXDpFAs09oCidKJ8oBXclUWtjyMcQv3DgMfISkJg?e=MyjOdI https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56120.md

Share on: