PT-2025-6382 · Ruijie · Ruijie Rg-Nbr2600S Gateway

Published 2025-02-11 · Updated 2025-08-13 · CVE-2025-25527

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ruijie RG-NBR2600S Gateway version 10.3(4b12)

Description The issue is related to a buffer overflow vulnerability due to the lack of length verification in the configuration of source address NAT rules. This can cause the remote target device to crash or execute arbitrary commands.

Recommendations For Ruijie RG-NBR2600S Gateway version 10.3(4b12), consider restricting the configuration of source address NAT rules to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-25527

Affected Products

Ruijie Rg-Nbr2600S Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-25527 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25527 · Vendor Advisory
• https://t.me/cveNotify/132048 · Telegram Post
• https://t.me/cvedetector/17760 · Telegram Post
• https://twitter.com/CVEnew/status/1889398088583795167 · Twitter Post
• https://gist.github.com/XiaoCurry/354620285280aca98acba94a9c5fffb6 · Note