PT-2025-42421 · Rg-Est300 · Rg-Est300

Published 2025-10-16 · Updated 2025-10-16 · CVE-2025-58778

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie Networks RG-EST300 (affected versions not specified)

Description Multiple versions of RG-EST300 provided by Ruijie Networks include an SSH server function that is not documented in the manual and is enabled by default. Successful exploitation allows an attacker with knowledge of the related credentials to log in to the affected device, potentially leading to information disclosure, alteration of system configurations, or a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2025-58778

Affected Products

Rg-Est300

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-58778 · Security Note
• https://twitter.com/CVEnew/status/1978932552686801152 · Twitter Post
• https://twitter.com/CveFindCom/status/1978712408223814059 · Twitter Post
• https://t.me/cveNotify/138904 · Telegram Post
• https://ruijie.com.cn/gy/xw-aqtg-gw/929848 · Note
• https://jvn.jp/en/jp/JVN72648885 · Note
• https://t.me/CVEtracker/35051 · Telegram Post
• https://ruijie.com/en-global/support/productLifecycle · Note