CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.
- Score
- CVSS 4.0 8.6 High
- Status
- Deferred - vultures@jpcert.or.jp
- Published
- 2025-12-18
- Last modified
- 2026-10-07
- Weaknesses
- CWE-78
Affected products
- Ap180-ac V1.xx (Ruijie Networks Co. Ltd.)
- Ap180-ac V2.xx (Ruijie Networks Co. Ltd.)
- Ap180-ac V3.xx (Ruijie Networks Co. Ltd.)
- Ap180-pe V1.xx (Ruijie Networks Co. Ltd.)
- Ap180-pe V2.xx (Ruijie Networks Co. Ltd.)
- Ap180-pe V3.xx (Ruijie Networks Co. Ltd.)
- Ap180ja V1.xx (Ruijie Networks Co. Ltd.)
- Ap180ja V2.xx (Ruijie Networks Co. Ltd.)
- Ap180jp V1.xx (Ruijie Networks Co. Ltd.)
References
- https://www.ruijie.com.cn/gy/xw-aqtg-gw/930282/
- https://jvn.jp/en/vu/JVNVU94068946/
