CVE-2025-56120
HighCVSS 8.8Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
An OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allows attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Risk Assessment
An attacker could take control of the network device, execute arbitrary OS commands, and potentially move laterally within the organization's network.
Recommendation
Update the Ruijie X60 PRO firmware to a version containing the fix as soon as possible, or restrict access to the management interface.
Other vulnerabilities in Ruijie X60 PRO
See all- CVE-2025-56124High
An OS Command Injection vulnerability in the Ruijie X60 PRO (V1.00/V2.00) allows attackers to execute arbitrary commands via a crafted POST request to the module_get in the file /usr/local/lua/dev_sta/networkConnect.lua.
- CVE-2025-56118High
An OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allows attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Original NVD description (English source)
OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS