Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2025-56083

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Ruijie
Products
Reyee Os Rg-eap602 Rg-eap602 Firmware and 7 more
CVE-2025-56084

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Ruijie
Products
Reyee Os Rg-eap602 Rg-eap602 Firmware and 7 more
CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Ruijie
Products
Reyee Os Rg-eap602 Rg-eap602 Firmware and 7 more
CVE-2025-56113

OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Ruijie
Products
Reyee Os Rg-eap602 Rg-eap602 Firmware and 8 more
CVE-2025-56093

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Ruijie
Products
Rg-eap602 Rg-eap602 Firmware Rg-ew300 Pro and 4 more
CVE-2025-56095

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Ruijie
Products
Rg-eap602 Rg-eap602 Firmware Rg-ew1200g Pro and 1 more
CVE-2025-56108

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Ruijie
Products
Rg-eap602 Rg-eap602 Firmware Rg-est310 and 8 more
CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.

CVSS 3.1 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Ruijie
Products
Nbc Series Wireless Controllers Rg-eap101 Rg-eap101 Firmware and 194 more