（CVE-2025-56079）Ruijie RG-EW1300G OS命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2025-56079
• https://nvd.nist.gov/vuln/detail/CVE-2025-56079
• https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56079.md
• https://cert.kenet.or.ke/cve-2025-56079-ruijie-rg-ew1300g-os-command-injection
• https://github.com/advisories/GHSA-rpmq-5vrp-9xj8
• https://cve.imfht.com/detail/CVE-2025-56079?lang=en
• https://access.redhat.com/security/cve/cve-2025-56079
• https://www.cvedetails.com/version/2070617/Ruijie-Rg-ew1300g-4.0.html

Related Vulnerabilities

• （CVE-2025-56096）Ruijie RG-BCR600W设备命令注入漏洞
• （CVE-2025-56107）Ruijie RG-BCR RG-BCR600W OS命令注入漏洞
• （CVE-2025-56077）Ruijie RG-RAP2200(E) 247 2200 OS命令注入漏洞
• （CVE-2025-56087）Ruijie RG-BCR600W设备OS命令注入漏洞
• （CVE-2025-56082）Ruijie RG-BCR600W命令注入漏洞
• （CVE-2025-11141）Ruijie NBR2100G-E设备 /itbox_pi/branch_passw.php listAction函数city参数OS命令注入漏洞
• ruijie-excu-shell-disclosure: 锐捷交换机 WEB 管理系统 EXCU_SHELL 信息泄露
• PoCCVE-2023-4169: Ruijie RG-EW1200G Router - Password Reset
• PoCCVE-2023-4415: Ruijie RG-EW1200G Router Background - Login Bypass
• PoCCVE-2024-24116: Ruijie RG-NBS2009G-P - Improper Authentication
• PoCCNVD-2021-14536: Ruijie RG-UAC Information Disclosure
• PoCCNVD-2021-27648: Ruijie RG-UAC Information Leakage Vulnerability
• PoCCVE-2023-3306: 锐捷(ruijie)RG-EW1200G路由器 远程命令执行(需登录)