CNNVD-202512-2126 Information
CNNVD ID
CNNVD-202512-2126
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
Ruijie RG-YST是中国锐捷（Ruijie）公司的一系列无线网桥。 Ruijie RG-YST YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx版本存在安全漏洞，该漏洞源于对文件/usr/lib/lua/luci/modules/common.lua中pwdmodify的特制POST请求处理不当，可能导致执行任意命令。
Description (English)
Ruijie RG-YST is a series of wireless bridges by Ruijie China. Ruijie RG-YST YSTAP 3.0(1) B11P280YST250F V1.xxV2.xx version contains a security loophole that stems from the improper handling of the special POWST request for pwdmodify in document/usr/lib/lua/luci/modules/common.lua, which may result in the execution of arbitrary orders.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
锐捷
Published
2025-12-11
Last Modified
2026-02-24
References
https://1drv.ms/f/c/12406a392c92914b/EsGqqVSQqCVBjjz2FhAHAiAB4MCHo41vIuw2wPgLykbupA?e=YgF1gt https://1drv.ms/t/c/12406a392c92914b/EY_XOykAOvJJkGsDkmahTboBmmvNWczbXF3brroYsTWmTA?e=2Itzta https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56113.md
Share on: