OS Command Injection Vulnerability in Ruijie Network Devices

CVE-2025-56077

What is CVE-2025-56077?

An OS Command Injection vulnerability exists in the Ruijie RG-RAP2200(E) network device. This flaw allows attackers to execute arbitrary commands through a specifically crafted POST request directed at the 'module_set' function within the /usr/local/lua/dev_sta/nbr_cwmp.lua file. Exploitation of this vulnerability could lead to unauthorized command execution, posing significant risks to the integrity and security of the affected network infrastructure.

References