CNNVD-202512-2135 Information
CNNVD ID
CNNVD-202512-2135
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
Ruijie RG-YST是中国锐捷（Ruijie）公司的一系列无线网桥。 Ruijie RG-YST AP_3.0(1)B11P280YST250F版本存在安全漏洞，该漏洞源于文件/usr/lib/lua/luci/modules/common.lua中的pwdmodify函数未验证输入，可能导致OS命令注入攻击。
Description (English)
Ruijie RG-YST is a series of wireless bridges by Ruijie China. Ruijie RG-YST AP 3.0(1) B11P280YST250F version contains a security loophole resulting from the failure of the pwdmodify function in document/usr/lib/lua/luci/modules/common.lua, which may result in an OS command injection attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
锐捷
Published
2025-12-11
Last Modified
2026-02-24
References
https://1drv.ms/f/c/12406a392c92914b/EjgEtJ5yojhDpEoT-PbidhsBzsbVnT-D-32qK1bCrQN3-g?e=cVRYgN https://1drv.ms/t/c/12406a392c92914b/ETaD7apCrPFLtMj473NHV2gBaYrKV9A4ZZKMfyWgC949Zw?e=iyjx5g https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56099.md
Share on: