{"id": "CVE-2025-56752", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.4, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 3.9}]}, "published": "2025-09-03T18:15:35.363", "references": [{"url": "https://github.com/TNCX-byte/Vulnerability_Research/blob/main/CVE-2025-56752/README.md", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi."}], "lastModified": "2025-09-29T18:36:43.327", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es228gs-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D708F42-A120-4A71-9389-5D68BAF04727"}, {"criteria": "cpe:2.3:o:ruijie:rg-es228gs-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADD7EEBE-A25C-42EB-AA73-1C0041AB240F"}, {"criteria": "cpe:2.3:o:ruijie:rg-es228gs-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D708A493-DF38-4FFA-95D6-FAEDA7479E2E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es228gs-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C31BD606-FB2F-45E9-87E8-FD53E9CF15B6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es209gc-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07AC3740-D80C-493C-BDF0-C4E4A6FF2E92"}, {"criteria": "cpe:2.3:o:ruijie:rg-es209gc-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62ABA97C-C04A-4930-ABEB-43330A86D201"}, {"criteria": "cpe:2.3:o:ruijie:rg-es209gc-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82812FEE-CE7A-49A3-AD3E-9919F3C5F448"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es209gc-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7C512E6-67F8-4028-91D0-6C1910676D28"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es205gc-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84308992-2616-4D29-A62C-A28336E7C871"}, {"criteria": "cpe:2.3:o:ruijie:rg-es205gc-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25C15EFD-A9C8-4C47-A32D-59751641938B"}, {"criteria": "cpe:2.3:o:ruijie:rg-es205gc-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F1AD063-70A0-4A00-8D1C-13189E2B2DF3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es205gc-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "992A03B3-0579-4D09-AB8C-9A8DF5CE02C2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es205gc_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "032079BC-1CD8-4FE6-A4BD-B64F0A5232DF"}, {"criteria": "cpe:2.3:o:ruijie:rg-es205gc_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7770AD1B-310F-4132-9034-702CC17DAD69"}, {"criteria": "cpe:2.3:o:ruijie:rg-es205gc_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "427C1686-648D-41B8-A678-20A7A9AD3A1C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es205gc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B3F4DBB7-A07E-49A3-B646-3BC0A2E3CBAD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es208gc_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77194D9D-D468-4AE3-A0DE-E3A50325D6E1"}, {"criteria": "cpe:2.3:o:ruijie:rg-es208gc_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "486C8ACB-1E82-48DD-A300-787ED04A58FA"}, {"criteria": "cpe:2.3:o:ruijie:rg-es208gc_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D556E02D-41A0-423F-BE28-A901C851D845"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es208gc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32561419-E54D-457A-93A6-9D7021DA32E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es206gs-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77FE617E-328A-411E-93E8-76A231F49332"}, {"criteria": "cpe:2.3:o:ruijie:rg-es206gs-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA168A71-6BC7-4446-81C1-4B689E17A3C3"}, {"criteria": "cpe:2.3:o:ruijie:rg-es206gs-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED24FA92-6D9E-4F27-B811-358FC72AEF0E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es206gs-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9AFDB262-B8B6-4C86-9F2B-7CB4A80DAD60"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es210gs-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C643C188-1F3B-447A-94BC-70DCC7F877F8"}, {"criteria": "cpe:2.3:o:ruijie:rg-es210gs-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B000C3AF-8C0C-491C-A24C-654812C16A39"}, {"criteria": "cpe:2.3:o:ruijie:rg-es210gs-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71A327AD-F318-487B-B29F-247B7E6FE923"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es210gs-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CAC0CF7D-AC5D-4636-A5A5-0F2C9CAC1AB3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es218gc-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87825E8C-298B-44A8-8703-A3CC74CC3A39"}, {"criteria": "cpe:2.3:o:ruijie:rg-es218gc-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70B9E77C-85B7-477A-8832-9B1A4C092965"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es218gc-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B3290DDF-7AE6-4180-AFB5-B1CD426CE667"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es226gc-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92920C98-079A-4A36-8463-247035BF9AF9"}, {"criteria": "cpe:2.3:o:ruijie:rg-es226gc-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85DE5AF7-2B85-45B0-853F-AFD246A99F20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es226gc-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BE000134-F3A7-48A0-9804-05E093471B19"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es206gc-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "006B05FD-15BB-4EF9-AB3B-1E7047D797BB"}, {"criteria": "cpe:2.3:o:ruijie:rg-es206gc-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDB31255-22B1-4456-A73C-9ED40033BE71"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es206gc-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3C6EBBF-062D-486F-B728-5546E30032EF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es216gc_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E96C4E27-2199-4264-8279-F05419DC1E61"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es216gc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3535A8DE-B573-4615-A356-0F38589B29E9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es224gc_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14FC2F4C-D697-4AA7-8371-3BB6CAED0013"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es224gc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "47D958EE-E4F6-4CA1-B651-A657AFB27903"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es210gc-lp_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F216AF6C-FF8A-4AC7-A863-594AF656833E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es210gc-lp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC04D700-F6C2-4A88-B5BF-0768BF016546"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es206mg-p_firmware:esw_1.0\\(1\\)b1p42_release\\(12142711\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03FDF4A2-1A03-45FA-B1EF-AEB56A8FA44D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es206mg-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49B4F98D-AB74-4D2C-81C3-08973EA0339D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es209mg-p_firmware:esw_1.0\\(1\\)b1p42_release\\(12142711\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDBD1BAD-E228-4EC9-8ADB-4BB26DAC3C74"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es209mg-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D186AC64-AA11-4D20-9C91-0C3327B59295"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-nis2100-8gt2sfp-hp_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AFEE7E5-A87F-4420-94CE-63C35857E242"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-nis2100-8gt2sfp-hp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "60BDBCED-BFAF-4532-9CA6-14DC05303789"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-nis2100-4gt2sfp-hp_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D8881A4-9562-4ECF-B39B-3AA3A93CCAF9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-nis2100-4gt2sfp-hp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F590ACA6-0E84-4226-B7AD-52C277D0DF22"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es216gc-v2_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9122AA60-499F-474A-B3B5-80B544090235"}, {"criteria": "cpe:2.3:o:ruijie:rg-es216gc-v2_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "971F6B6E-21D3-4B5D-8420-B1FDE0EE0562"}, {"criteria": "cpe:2.3:o:ruijie:rg-es216gc-v2_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D94FBE5B-41B1-41E6-9FFE-088B192C9441"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es216gc-v2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "85F030B6-500E-4D90-8392-98CC37B388C0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es224gc-v2_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00B46A53-AF82-453A-9BE5-E033BA8F595A"}, {"criteria": "cpe:2.3:o:ruijie:rg-es224gc-v2_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "874CDB78-2D42-4172-8D05-EEC7918480A7"}, {"criteria": "cpe:2.3:o:ruijie:rg-es224gc-v2_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A07561CF-49FD-4AF1-9D29-D891B86D6148"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es224gc-v2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DC651E10-BFE5-4D65-A85F-45237BC9B30D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ruijie:rg-es220gs-p_firmware:esw_1.0\\(1\\)b1p27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E54627D-DC55-42B1-83FB-11D9DEDE3404"}, {"criteria": "cpe:2.3:o:ruijie:rg-es220gs-p_firmware:esw_1.0\\(1\\)b1p35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A44BFD2D-DCE2-4E69-915F-87B60DCA3115"}, {"criteria": "cpe:2.3:o:ruijie:rg-es220gs-p_firmware:esw_1.0\\(1\\)b1p39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AA27365-8987-4982-A4C1-DFC18386F3F6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ruijie:rg-es220gs-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "67CE5E16-D96D-409D-9389-8BB2E7F908B7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}
