PT-2025-51995 · Ruijie Networks · Rg-Ap180+1

Chuya Hayakawa · Published 2025-12-18 · Updated 2025-12-23 · CVE-2025-68459

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruijie Networks AP180 series versions (affected versions not specified)

Description The RG-AP180, an indoor wall plate wireless AP, contains an OS command injection issue. An attacker who gains access to the CLI service can execute arbitrary OS commands on the device. The vulnerability allows for the execution of commands through the CLI service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-68459

Affected Products

Rg-Ap180

Ruijie Networks Ap180

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68459 · Security Note
• https://twitter.com/CVEnew/status/2002466826689638688 · Twitter Post
• https://twitter.com/cracbot/status/2003420374080585959 · Twitter Post
• https://ruijie.com.cn/gy/xw-aqtg-gw/930282 · Note
• https://jvn.jp/en/vu/JVNVU94068946 · Note