OS Command Injection in Ruijie RG-BCR600W Network Device

CVE-2025-56082

What is CVE-2025-56082?

The Ruijie RG-BCR600W network device is susceptible to an OS Command Injection vulnerability that allows an attacker to execute arbitrary commands. This security flaw can be exploited through a specially crafted POST request directed at the check_changes function in the common.lua file, located in the system's LUA controller architecture. Exploitation of this vulnerability may lead to unauthorized control over the device and potential compromise of network security.

References