Ruijie X60 PRO vulnerabilities

3 known CVE vulnerabilities in Ruijie X60 PRO, translated and rated.

CVE-2025-56124High
An OS Command Injection vulnerability in the Ruijie X60 PRO (V1.00/V2.00) allows attackers to execute arbitrary commands via a crafted POST request to the module_get in the file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56120High
An OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allows attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56118High
An OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allows attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS