Description (CVE-2025-11141)Ruijie NBR2100G-E设备 /itbox_pi/branch_passw.php listAction函数city参数OS命令注入漏洞
References https://nvd.nist.gov/vuln/detail/CVE-2025-11141 https://access.redhat.com/security/cve/cve-2025-11141 https://vuldb.com/vuln/326218 https://avd.aquasec.com/nvd/2025/cve-2025-11141/ https://github.com/DavCloudz/cve/issues/2 https://app.opencve.io/cve/?vendor=ruijie https://cve.imfht.com/detail/CVE-2025-11141?lang=en https://vulners.com/redhatcve/RH:CVE-2025-11141 https://www.thehackerwire.com/vulnerability/CVE-2025-11141/
Related Vulnerabilities(CVE-2025-56096)Ruijie RG-BCR600W设备命令注入漏洞(CVE-2025-56107)Ruijie RG-BCR RG-BCR600W OS命令注入漏洞(CVE-2025-56077)Ruijie RG-RAP2200(E) 247 2200 OS命令注入漏洞(CVE-2025-56087)Ruijie RG-BCR600W设备OS命令注入漏洞(CVE-2025-56079)Ruijie RG-EW1300G OS命令注入漏洞(CVE-2025-56082)Ruijie RG-BCR600W命令注入漏洞ruijie-excu-shell-disclosure: 锐捷交换机 WEB 管理系统 EXCU_SHELL 信息泄露PoCCVE-2023-4169: Ruijie RG-EW1200G Router - Password ResetPoCCVE-2023-4415: Ruijie RG-EW1200G Router Background - Login BypassPoCCVE-2024-24116: Ruijie RG-NBS2009G-P - Improper AuthenticationPoCCNVD-2021-14536: Ruijie RG-UAC Information DisclosurePoCCNVD-2021-27648: Ruijie RG-UAC Information Leakage VulnerabilityPoCCVE-2023-3306: 锐捷(ruijie)RG-EW1200G路由器 远程命令执行(需登录)