CVE-2025-56108
HIGH EPSS 81.3%
Published Dec 11, 20256mo ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
Published Dec 11, 2025 6mo ago
Last Modified Jun 17, 2026 1w ago
Description
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
81.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-78 OS Command Injection Injection
Affected Products 10
| Vendor | Product | Version | Range |
|---|---|---|---|
| ruijie | x30_pro_firmware | * | any |
| ruijie | x30_pro | 1.0 | any |
| ruijie | rg-eap602_firmware | 3.0\(1\)b2p55 | any |
| ruijie | rg-eap602 | * | any |
| ruijie | rg-est350_firmware | 3.0\(1\)b11p221 | any |
| ruijie | rg-est350 | 2.0 | any |
| ruijie | rg-ew300_pro_firmware | 3.0\(1\)b11p219 | any |
| ruijie | rg-ew300_pro | * | any |
| ruijie | rg-est310_firmware | 3.0\(1\)b11p211 | any |
| ruijie | rg-est310 | 2.0 | any |
References 3
- 1drv.ms https://1drv.ms/f/c/12406a392c92914b/EtGIxwWujwxBvQhL9wgnUIwBkg-mndJJX07Igr6d0cic-g?e=4KJbWY
- 1drv.ms https://1drv.ms/t/c/12406a392c92914b/Ecib6--fxv9HhrfAdhmP5R4BOPDcTcqTOBt0hQBEx5BTxA?e=s3ejN1
- github.com https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56108.md
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.