9.4
CVE-2025-56752
- EPSS 0.53%
- Veröffentlicht 03.09.2025 00:00:00
- Zuletzt bearbeitet 29.09.2025 18:36:43
- Erkennungen
LoginA vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruijie ≫ Rg-es228gs-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es228gs-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es228gs-p Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es209gc-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es209gc-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es209gc-p Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es205gc-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es205gc-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es205gc-p Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es205gc Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es205gc Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es205gc Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es208gc Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es208gc Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es208gc Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es206gs-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es206gs-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es206gs-p Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es210gs-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es210gs-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es210gs-p Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es218gc-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es218gc-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es226gc-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es226gc-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es206gc-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es206gc-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es216gc Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es224gc Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es210gc-lp Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es206mg-p Firmware Version esw_1.0(1)b1p42_release(12142711)
Ruijie ≫ Rg-es209mg-p Firmware Version esw_1.0(1)b1p42_release(12142711)
Ruijie ≫ Rg-nis2100-8gt2sfp-hp Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-nis2100-4gt2sfp-hp Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es216gc-v2 Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es216gc-v2 Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es216gc-v2 Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es224gc-v2 Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es224gc-v2 Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es224gc-v2 Firmware Version esw_1.0(1)b1p39
Ruijie ≫ Rg-es220gs-p Firmware Version esw_1.0(1)b1p27
Ruijie ≫ Rg-es220gs-p Firmware Version esw_1.0(1)b1p35
Ruijie ≫ Rg-es220gs-p Firmware Version esw_1.0(1)b1p39
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.417 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 9.4 | 3.9 | 5.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
https://github.com/TNCX-byte/Vulnerability_Research/blob/main/CVE-2025-56752/README.md