CVE-2025-56124: Command Injection

Published Dec 11, 2025

Updated

OS Command Injection vulnerability in Ruijie X60 PRO X6010212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua.

Affected Software

6 affected components

Ruijie X60 PRO

All of the following

Ruijie Rg-x60 Pro Firmware=1.021.2014

Any of the following

Ruijie RG-X60 PRO=1.0

Ruijie RG-X60 PRO=2.0

All of the following

Ruijie Rg-ew1200 Firmware=3.0\(1\)b11p301

Ruijie RG-EW1200

Event History

Dec 11, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-56124?

CVE-2025-56124 has a high severity rating due to its potential for exploitation through OS Command Injection.

How do I fix CVE-2025-56124?

To mitigate CVE-2025-56124, update the affected Ruijie X60 PRO devices to the latest firmware version that addresses this vulnerability.

What type of vulnerability is CVE-2025-56124?

CVE-2025-56124 is categorized as an OS Command Injection vulnerability.

Which devices are affected by CVE-2025-56124?

CVE-2025-56124 affects Ruijie X60 PRO devices running vulnerable firmware versions.

How can attackers exploit CVE-2025-56124?

Attackers can exploit CVE-2025-56124 by sending a crafted POST request to the vulnerable module_get endpoint to execute arbitrary commands.