OS Command Injection Vulnerability in Ruijie RG-EW1200G PRO Products

CVE-2025-56095

What is CVE-2025-56095?

An OS Command Injection vulnerability exists in the Ruijie RG-EW1200G PRO devices, where attackers can exploit inadequate input validation to execute arbitrary commands. This vulnerability is triggered through a specially crafted POST request directed at the module_set function within the /usr/local/lua/dev_sta/nbr_cwmp.lua file. Successful exploitation could allow attackers to gain unauthorized access to device functions, potentially compromising the integrity and security of the affected systems.

References