CVE-2025-56093

Name of the Vulnerable Software and Affected Versions Ruijie X30-PRO versions X30-PRO-V1 09241521

Description An OS Command Injection issue exists in Ruijie X30-PRO version X30-PRO-V1 09241521. Attackers can execute arbitrary commands by sending a specially crafted POST request to the setWisp function located in the file /usr/lib/lua/luci/modules/wireless.lua. The vulnerability is triggered through a crafted POST request.

Recommendations Apply updates to address the issue in the setWisp function within the /usr/lib/lua/luci/modules/wireless.lua file.