PT-2025-50685 · Ruijie Networks · Ruijie X60 Pro

Flegoity · Published 2025-12-11 · Updated 2025-12-23 · CVE-2025-56120

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie X60 PRO versions V1.00 through V2.00

Description An OS Command Injection issue exists in Ruijie X60 PRO. Attackers can execute arbitrary commands by sending a specially crafted POST request to the module set function within the /usr/local/lua/dev config/config retain.lua file. The vulnerability allows for the execution of arbitrary commands.

Recommendations Versions V1.00 through V2.00 should be updated to a newer, secure version when available. As a temporary workaround, restrict access to the module set function in /usr/local/lua/dev config/config retain.lua to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-56120

Affected Products

Ruijie X60 Pro

References · 7

• 🔥 https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56120.md · Exploit
• 🔥 https://1drv.ms/t/c/12406a392c92914b/EZf6v9BXDpFAs09oCidKJ8oBXclUWtjyMcQv3DgMfISkJg?e=MyjOdI · Exploit
• 🔥 https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56120 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56120 · Vendor Advisory
• https://t.me/cveNotify/146673 · Telegram Post
• https://twitter.com/CVEnew/status/2000246177262919880 · Twitter Post