CVE-2025-56124

Timeline

Detection, updates, and resolution for this record.

1. Dec 11, 2025 · NIST NVD

   Detected

   OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

2. Oct 14, 2026 · NIST NVD

   Updated

   OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

Affected

• cpe ruijie/rg-ew1200 firmware3.0\(1\)b11p301
• cpe ruijie/rg-x60 pro firmware1.021.2014

Sources

• CVE.orgCVE-2025-56124

  Official CVE identifier

  cve.org
• NIST NVDCVE-2025-56124

  OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

  nvd.nist.gov

References

• Product · 1drv.ms
• Third Party Advisory · 1drv.ms
• Exploit · github.com