Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Ruijie Component: Rg-eap602 Firmware Clear all filters
TI-2025-35250 CVE-2025-56113 · GHSA-293q-m4h6-56g9

OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F…

Priority MEDIUM 43

OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/module…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01662 Published 2025-12-11 No fix listed CWE-78
TI-2025-35246 CVE-2025-56108 · GHSA-r2cv-pvmg-466m

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing…

Priority MEDIUM 45

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02661 Published 2025-12-11 No fix listed CWE-78
TI-2025-35237 CVE-2025-56095 · GHSA-4v6j-72ww-qv59

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO…

Priority MEDIUM 45

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02757 Published 2025-12-11 No fix listed CWE-78
TI-2025-35235 CVE-2025-56093 · GHSA-pjmj-gfjh-hg25

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing…

Priority MEDIUM 46

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03153 Published 2025-12-11 No fix listed CWE-78
TI-2025-35226 CVE-2025-56084 · GHSA-8x8h-392r-78mm

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO…

Priority MEDIUM 44

OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02052 Published 2025-12-11 No fix listed CWE-78
TI-2025-35225 CVE-2025-56083 · GHSA-xvw2-m4qw-qqh5

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing…

Priority MEDIUM 44

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02001 Published 2025-12-11 No fix listed CWE-78
TI-2023-20169 CVE-2023-38902 · GHSA-qf45-5h68-rp79

A command injection vulnerability in RG-EW series home routers and repeaters…

Priority HIGH 73

A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and R…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02582 Published 2023-08-17 No fix listed CWE-77