CVE-2025-56089
HighCVSS 8.8Exploitation Probability (EPSS)
High risk86th percentile - higher than 86% of all known CVEs
Summary
OS Command Injection vulnerability in Ruijie M18 (version EW_3.0(1)B11P226_M18_10223116). An attacker can execute arbitrary commands via a crafted POST request to the module_set function in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Risk Assessment
Allows remote execution of arbitrary system commands on the device, potentially leading to full compromise of the router and the organization's network traffic.
Recommendation
Update the Ruijie M18 firmware to the latest version provided by the vendor and restrict access to the administrative interface to trusted networks.
Other vulnerabilities in Ruijie M18
See all- CVE-2025-56114High
An OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allows attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
- CVE-2025-56101High
An OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allows attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Original NVD description (English source)
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS