CVE-2025-56086

Name of the Vulnerable Software and Affected Versions Ruijie RG-EW1200 versions EW 3.0(1)B11P227 EW1200 11130208RG-EW1200 V1.00

Description An OS Command Injection issue exists in Ruijie RG-EW1200. Attackers can execute arbitrary commands by sending a specially crafted POST request to the module get function within the /usr/local/lua/dev sta/networkConnect.lua file. The crafted request allows for arbitrary command execution.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the module get function within the /usr/local/lua/dev sta/networkConnect.lua file.