OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
History

Fri, 12 Dec 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Ruijie
Ruijie x60 Pro
Vendors & Products Ruijie
Ruijie x60 Pro

Thu, 11 Dec 2025 18:45:00 +0000

Type Values Removed Values Added
Description OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-11T00:00:00.000Z

Updated: 2025-12-11T18:32:09.649Z

Reserved: 2025-08-16T00:00:00.000Z

Link: CVE-2025-56118

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-11T19:15:57.270

Modified: 2025-12-11T19:15:57.270

Link: CVE-2025-56118

cve-icon Redhat

No data.