CVE-2025-56106: Command Injection
Published Dec 11, 2025
·Updated
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua.
Affected Software
5 affected components
Ruijie RG-EW1800GX
All of the following
Ruijie Rg-ew1800gx Firmware=3.0\(1\)b11p226
Ruijie RG-EW1800GX
All of the following
Ruijie Rg-est350 Firmware=3.0\(1\)b11p221
Ruijie Rg-est350
Event History
Dec 11, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-56106?
CVE-2025-56106 is classified as a high-severity OS Command Injection vulnerability.
2
How do I fix CVE-2025-56106?
To fix CVE-2025-56106, you should implement input validation and sanitize any user input in the affected script.
3
What systems are affected by CVE-2025-56106?
CVE-2025-56106 affects the Ruijie RG-EW1800GX device specifically.
4
What type of attack can occur due to CVE-2025-56106?
CVE-2025-56106 allows attackers to execute arbitrary commands on the affected device via crafted POST requests.
5
Can CVE-2025-56106 be exploited remotely?
Yes, CVE-2025-56106 can be exploited remotely if an attacker has access to send POST requests to the device.