OS Command Injection Vulnerability in Ruijie X60 PRO Products
CVE-2025-56120

8.8HIGH

Key Information:

Vendor

Ruijie

Status
X60 PRO
Vendor
CVE Published:
11 December 2025

What is CVE-2025-56120?

An OS Command Injection vulnerability exists in Ruijie X60 PRO devices, specifically affecting versions V1.00 and V2.00. This flaw allows an attacker to execute arbitrary system commands by sending a specially crafted POST request to the module_set endpoint in the configuration file located at /usr/local/lua/dev_config/config_retain.lua. Successful exploitation of this vulnerability enables unauthorized access to system functions, which could lead to further compromise of the device and its network. It is crucial for users of Ruijie X60 PRO products to apply available security updates and restrict access to potentially vulnerable interfaces.

References

https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUk...
https://1drv.ms/t/c/12406a392c92914b/EZf6v9BXDpFAs09oCidK...
https://github.com/flegoity/Ruijie-Multiple-Devices-Vulne...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.