Rg X60 Firmware
Monthly
Authenticated OS command injection in Ruijie RG-EW1200 (firmware 3.0(1)B11P227) and RG-X60 (firmware 3.0(1)B11P237) routers lets a network-reachable attacker who already holds low-privilege credentials run arbitrary commands on the device by sending a crafted POST request to the module_get handler in /usr/local/lua/dev_sta/networkConnect.lua. Publicly available exploit code exists and the EPSS score is 2.91% (87th percentile), but there is no confirmed active exploitation (the CVE is not in CISA KEV). Impact per the assessed vector is high - full loss of confidentiality, integrity, and availability on the affected device - yet exploitation first requires valid credentials or a session, so this is a credible mid-tier priority rather than an emergency.
Authenticated OS command injection in Ruijie RG-EW1200 (firmware 3.0(1)B11P227) and RG-X60 (firmware 3.0(1)B11P237) routers lets a network-reachable attacker who already holds low-privilege credentials run arbitrary commands on the device by sending a crafted POST request to the module_get handler in /usr/local/lua/dev_sta/networkConnect.lua. Publicly available exploit code exists and the EPSS score is 2.91% (87th percentile), but there is no confirmed active exploitation (the CVE is not in CISA KEV). Impact per the assessed vector is high - full loss of confidentiality, integrity, and availability on the affected device - yet exploitation first requires valid credentials or a session, so this is a credible mid-tier priority rather than an emergency.