CVE-2025-56752
Summary
| CVE | CVE-2025-56752 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-09-03 18:15:35 UTC |
| Updated | 2026-11-07 18:10:00 UTC |
| Description | A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi. |
Risk And Classification
Primary CVSS: v3.1 9.4 CRITICAL from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
EPSS: 0.005280000 probability, percentile 0.449710000 (date 2026-11-09)
Problem Types: CWE-287 | n/a | CWE-287 CWE-287 Improper Authentication
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 9.4 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 9.4 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
LowAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Ruijie | Rg-es205gc | - | All | All | All |
| Hardware | Ruijie | Rg-es205gc-p | - | All | All | All |
| Operating System | Ruijie | Rg-es205gc-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es205gc-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es205gc-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Operating System | Ruijie | Rg-es205gc Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es205gc Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es205gc Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es206gc-p | - | All | All | All |
| Operating System | Ruijie | Rg-es206gc-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es206gc-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Hardware | Ruijie | Rg-es206gs-p | - | All | All | All |
| Operating System | Ruijie | Rg-es206gs-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es206gs-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es206gs-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es206mg-p | - | All | All | All |
| Operating System | Ruijie | Rg-es206mg-p Firmware | esw_1.0\(1\)b1p42_release\(12142711\) | All | All | All |
| Hardware | Ruijie | Rg-es208gc | - | All | All | All |
| Operating System | Ruijie | Rg-es208gc Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es208gc Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es208gc Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es209gc-p | - | All | All | All |
| Operating System | Ruijie | Rg-es209gc-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es209gc-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es209gc-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es209mg-p | - | All | All | All |
| Operating System | Ruijie | Rg-es209mg-p Firmware | esw_1.0\(1\)b1p42_release\(12142711\) | All | All | All |
| Hardware | Ruijie | Rg-es210gc-lp | - | All | All | All |
| Operating System | Ruijie | Rg-es210gc-lp Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Hardware | Ruijie | Rg-es210gs-p | - | All | All | All |
| Operating System | Ruijie | Rg-es210gs-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es210gs-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es210gs-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es216gc | - | All | All | All |
| Hardware | Ruijie | Rg-es216gc-v2 | - | All | All | All |
| Operating System | Ruijie | Rg-es216gc-v2 Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es216gc-v2 Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es216gc-v2 Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Operating System | Ruijie | Rg-es216gc Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Hardware | Ruijie | Rg-es218gc-p | - | All | All | All |
| Operating System | Ruijie | Rg-es218gc-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es218gc-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Hardware | Ruijie | Rg-es220gs-p | - | All | All | All |
| Operating System | Ruijie | Rg-es220gs-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es220gs-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es220gs-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-es224gc | - | All | All | All |
| Hardware | Ruijie | Rg-es224gc-v2 | - | All | All | All |
| Operating System | Ruijie | Rg-es224gc-v2 Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es224gc-v2 Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es224gc-v2 Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Operating System | Ruijie | Rg-es224gc Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Hardware | Ruijie | Rg-es226gc-p | - | All | All | All |
| Operating System | Ruijie | Rg-es226gc-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es226gc-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Hardware | Ruijie | Rg-es228gs-p | - | All | All | All |
| Operating System | Ruijie | Rg-es228gs-p Firmware | esw_1.0\(1\)b1p27 | All | All | All |
| Operating System | Ruijie | Rg-es228gs-p Firmware | esw_1.0\(1\)b1p35 | All | All | All |
| Operating System | Ruijie | Rg-es228gs-p Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-nis2100-4gt2sfp-hp | - | All | All | All |
| Operating System | Ruijie | Rg-nis2100-4gt2sfp-hp Firmware | esw_1.0\(1\)b1p39 | All | All | All |
| Hardware | Ruijie | Rg-nis2100-8gt2sfp-hp | - | All | All | All |
| Operating System | Ruijie | Rg-nis2100-8gt2sfp-hp Firmware | esw_1.0\(1\)b1p39 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/TNCX-byte/Vulnerability_Research/blob/main/CVE-2025-56752/REA... | [email protected] | github.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.