PT-2025-50673 · Ruijie · Ruijie M18 Ew

Published 2025-12-11 · Updated 2026-01-27 · CVE-2025-56101

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie M18 EW versions 3.0(1)B11P226 M18 10223116

Description An issue exists in Ruijie M18 EW that allows attackers to execute arbitrary commands. This is due to an OS Command Injection flaw triggered by a crafted POST request to the module get function within the /usr/local/lua/dev sta/networkConnect.lua file. The crafted request allows for arbitrary command execution.

Recommendations Apply updates to address the issue in Ruijie M18 EW version 3.0(1)B11P226 M18 10223116.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-56101

Affected Products

Ruijie M18 Ew

References · 7

• 🔥 https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56101.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-56101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56101 · Security Note
• https://t.me/cveNotify/150019 · Telegram Post
• https://1drv.ms/t/c/12406a392c92914b/EbNlU_0K0v1Krzq7CaUWn0AB_yu3ICrdmwoVuS2txFGMhA?e=0gIUMh · Note
• https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM · Note
• https://twitter.com/CVEnew/status/2000246163895627938 · Twitter Post