High severity8.8NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026
CVE-2025-56085
CVE-2025-56085
Description
OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00
- cpe:2.3:o:ruijie:rg-ew1200_firmware:3.0\(1\)b11p227:*:*:*:*:*:*:*
- cpe:2.3:o:ruijie:rg-ew300_pro_firmware:3.0\(1\)b11p219:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- 1drv.ms/f/c/12406a392c92914b/EuESCSUsYvtAtfW1SfmGGxsBw-kN9iCbpnUU9T8TXofH3wnvdBroken LinkExploit
- 1drv.ms/t/c/12406a392c92914b/ERuoK3MLW2RLpQ6qOoGs5wIB73tNnsDzRT8U6U6z4VmskQnvdBroken LinkExploit
- github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56085.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.