PT-2025-50673 · Ruijie · Ruijie M18 Ew
CVE-2025-56101
·
Publicado
2025-12-11
·
Atualizado
2026-01-27
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Ruijie M18 EW versions 3.0(1)B11P226 M18 10223116
Description
An issue exists in Ruijie M18 EW that allows attackers to execute arbitrary commands. This is due to an OS Command Injection flaw triggered by a crafted POST request to the
module get function within the /usr/local/lua/dev sta/networkConnect.lua file. The crafted request allows for arbitrary command execution.Recommendations
Apply updates to address the issue in Ruijie M18 EW version 3.0(1)B11P226 M18 10223116.
Exploit
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ruijie M18 Ew