PT-2025-50684 · Ruijie Networks · Ruijie X60 Pro

Flegoity · Published 2025-12-11 · Updated 2025-12-23 · CVE-2025-56118

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie X60 PRO versions V1.00 through V2.00

Description An OS Command Injection issue exists in Ruijie X60 PRO. Attackers can execute arbitrary commands by sending a specially crafted POST request to the module set function within the /usr/local/lua/dev sta/nbr cwmp.lua file. The vulnerability is triggered through a crafted POST request.

Recommendations Update Ruijie X60 PRO to a version later than V2.00. As a temporary workaround, restrict access to the module set function within the /usr/local/lua/dev sta/nbr cwmp.lua file.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-56118

Affected Products

Ruijie X60 Pro

References · 7

• 🔥 https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56118.md · Exploit
• 🔥 https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh · Exploit
• 🔥 https://1drv.ms/t/c/12406a392c92914b/EV2jr71QaoFBjf3SLQcUA6sBcmzSsyx2jJ_XY7yOBk_Sjg?e=WOY7Wd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56118 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56118 · Vendor Advisory
• https://twitter.com/CVEnew/status/2000246176298172875 · Twitter Post
• https://t.me/cveNotify/146672 · Telegram Post