Ruijie

X30 Pro Firmware

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-56092

Exploit
  • EPSS 0.25%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 29.01.2026 14:51:43

OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

8.8

CVE-2025-56093

Exploit
  • EPSS 0.57%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 27.01.2026 17:52:18

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.

8.8

CVE-2025-56094

Exploit
  • EPSS 0.28%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 27.01.2026 17:47:41

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua.

8.8

CVE-2025-56098

Exploit
  • EPSS 0.92%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 27.01.2026 17:58:03

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

8.8

CVE-2025-56108

Exploit
  • EPSS 0.44%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 26.01.2026 22:38:34

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.

8.8

CVE-2025-56117

Exploit
  • EPSS 1.44%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 07.01.2026 20:34:04

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.