CNNVD-202512-2125 Information

CNNVD ID

CNNVD-202512-2125

CVE-2025-56114

  • CNNVD Published: 2025-12-11

Description (Chinese)

Ruijie M18是中国锐捷(Ruijie)公司的一款WiFi路由器。 Ruijie M18 EW_3.0(1)B11P226_M18_10223116版本存在安全漏洞,该漏洞源于对文件/usr/local/lua/dev_config/config_retain.lua中module_set的特制POST请求处理不当,可能导致执行任意命令。

Description (English)

Ruijie M18 is a WiFi router of Ruijie China. Ruijie M18 EW 3.0(1) B11P226 M18 10223116 has a security loophole, which arises out of improper handling of the specialized POST request for Modeule set in document/usr/local/lua/dev config/config retain.lua, which may result in the execution of arbitrary orders.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

锐捷

Published

2025-12-11

Last Modified

2026-02-24

References

https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM https://1drv.ms/t/c/12406a392c92914b/EWfEhLkTSblOur72XhaQ7W4BsxQ1IWXZ-Wkcv9WC7AYb-g?e=LpMdqT https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56114.md

Share on: