OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
History

Fri, 12 Dec 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Ruijie
Ruijie x60 Pro
Vendors & Products Ruijie
Ruijie x60 Pro

Thu, 11 Dec 2025 19:00:00 +0000

Type Values Removed Values Added
Description OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-11T00:00:00.000Z

Updated: 2025-12-11T18:38:48.747Z

Reserved: 2025-08-16T00:00:00.000Z

Link: CVE-2025-56124

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-11T19:15:57.723

Modified: 2025-12-11T19:15:57.723

Link: CVE-2025-56124

cve-icon Redhat

No data.