CVE-2025-56752: Critical severity Ruijie RG-ES series switch firmware vulnerability
Published Sep 3, 2025
·Updated
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.
Affected Software
64 affected components
Ruijie RG-ES series switch firmware
All of the following
Any of the following
Ruijie Rg-es228gs-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es228gs-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es228gs-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es228gs-p
All of the following
Any of the following
Ruijie Rg-es209gc-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es209gc-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es209gc-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es209gc-p
All of the following
Any of the following
Ruijie Rg-es205gc-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es205gc-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es205gc-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es205gc-p
All of the following
Any of the following
Ruijie Rg-es205gc Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es205gc Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es205gc Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es205gc
All of the following
Any of the following
Ruijie Rg-es208gc Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es208gc Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es208gc Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es208gc
All of the following
Any of the following
Ruijie Rg-es206gs-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es206gs-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es206gs-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es206gs-p
All of the following
Any of the following
Ruijie Rg-es210gs-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es210gs-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es210gs-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es210gs-p
All of the following
Any of the following
Ruijie Rg-es218gc-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es218gc-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es218gc-p
All of the following
Any of the following
Ruijie Rg-es226gc-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es226gc-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es226gc-p
All of the following
Any of the following
Ruijie Rg-es206gc-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es206gc-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es206gc-p
All of the following
Ruijie Rg-es216gc Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es216gc
All of the following
Ruijie Rg-es224gc Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es224gc
All of the following
Ruijie Rg-es210gc-lp Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es210gc-lp
All of the following
Ruijie Rg-es206mg-p Firmware=esw_1.0\(1\)b1p42_release\(12142711\)
Ruijie Rg-es206mg-p
All of the following
Ruijie Rg-es209mg-p Firmware=esw_1.0\(1\)b1p42_release\(12142711\)
Ruijie Rg-es209mg-p
All of the following
Ruijie Rg-nis2100-8gt2sfp-hp Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-nis2100-8gt2sfp-hp
All of the following
Ruijie Rg-nis2100-4gt2sfp-hp Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-nis2100-4gt2sfp-hp
All of the following
Any of the following
Ruijie Rg-es216gc-v2 Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es216gc-v2 Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es216gc-v2 Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es216gc-v2
All of the following
Any of the following
Ruijie Rg-es224gc-v2 Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es224gc-v2 Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es224gc-v2 Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es224gc-v2
All of the following
Any of the following
Ruijie Rg-es220gs-p Firmware=esw_1.0\(1\)b1p27
Ruijie Rg-es220gs-p Firmware=esw_1.0\(1\)b1p35
Ruijie Rg-es220gs-p Firmware=esw_1.0\(1\)b1p39
Ruijie Rg-es220gs-p
Event History
Sep 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-56752?
CVE-2025-56752 is a critical vulnerability that allows remote attackers to bypass authentication mechanisms.
2
How do I fix CVE-2025-56752?
To fix CVE-2025-56752, update the Ruijie RG-ES series switch firmware to the latest version that addresses this vulnerability.
3
What devices are affected by CVE-2025-56752?
CVE-2025-56752 affects the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39.
4
Can CVE-2025-56752 lead to device control?
Yes, CVE-2025-56752 can allow attackers to gain unrestricted access and potentially seize control of affected devices.
5
How does CVE-2025-56752 exploit the vulnerability?
CVE-2025-56752 is exploited through crafted HTTP POST requests to the affected device, bypassing authentication.