CNNVD-202512-2137 Information

CNNVD ID

CNNVD-202512-2137

CVE-2025-56097

  • CNNVD Published: 2025-12-11

Description (Chinese)

Ruijie RG-EW1800GX PRO是中国锐捷(Ruijie)公司的一款无线路由器。 Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117版本存在安全漏洞,该漏洞源于文件/usr/local/lua/dev_config/config_retain.lua中的module_set函数未验证输入,可能导致OS命令注入攻击。

Description (English)

Ruijie RG-EW1800GX PRO is a wireless router of Ruijie. Ruijie RG-EW1800GX PRO B11P226 EW1800GX-PRO 10223117 has a security loophole, which stems from the failure of the Module set function in document/usr/local/lua/dev config/config retain.lua, which may result in an OS command injection attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

锐捷

Published

2025-12-11

Last Modified

2026-02-24

References

https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi https://1drv.ms/t/c/12406a392c92914b/EeVJ2woYmHVHn_C0Sy_iRZsB4yZQFJDXSBOwMSZW0KXJrQ?e=VVGxWb https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56097.md

Share on: