CVE-2025-56752
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-03

Last updated on: 2025-09-29

Assigner: MITRE

Description
A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-03
Last Modified
2025-09-29
Generated
2026-06-16
AI Q&A
2025-09-03
EPSS Evaluated
2026-06-14
NVD
CVE-2025-56752
EUVD
EUVD-2025-26619
Affected Vendors & Products
Showing 63 associated CPEs
Vendor Product Version / Range
ruijie rg-es228gs-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es228gs-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es228gs-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es228gs-p *
ruijie rg-es209gc-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es209gc-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es209gc-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es209gc-p *
ruijie rg-es205gc-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es205gc-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es205gc-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es205gc-p *
ruijie rg-es205gc_firmware esw_1.0\(1\)b1p27
ruijie rg-es205gc_firmware esw_1.0\(1\)b1p35
ruijie rg-es205gc_firmware esw_1.0\(1\)b1p39
ruijie rg-es205gc *
ruijie rg-es208gc_firmware esw_1.0\(1\)b1p27
ruijie rg-es208gc_firmware esw_1.0\(1\)b1p35
ruijie rg-es208gc_firmware esw_1.0\(1\)b1p39
ruijie rg-es208gc *
ruijie rg-es206gs-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es206gs-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es206gs-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es206gs-p *
ruijie rg-es210gs-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es210gs-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es210gs-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es210gs-p *
ruijie rg-es218gc-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es218gc-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es218gc-p *
ruijie rg-es226gc-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es226gc-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es226gc-p *
ruijie rg-es206gc-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es206gc-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es206gc-p *
ruijie rg-es216gc_firmware esw_1.0\(1\)b1p27
ruijie rg-es216gc *
ruijie rg-es224gc_firmware esw_1.0\(1\)b1p27
ruijie rg-es224gc *
ruijie rg-es210gc-lp_firmware esw_1.0\(1\)b1p27
ruijie rg-es210gc-lp *
ruijie rg-es206mg-p_firmware esw_1.0\(1\)b1p42_release\(12142711\)
ruijie rg-es206mg-p *
ruijie rg-es209mg-p_firmware esw_1.0\(1\)b1p42_release\(12142711\)
ruijie rg-es209mg-p *
ruijie rg-nis2100-8gt2sfp-hp_firmware esw_1.0\(1\)b1p39
ruijie rg-nis2100-8gt2sfp-hp *
ruijie rg-nis2100-4gt2sfp-hp_firmware esw_1.0\(1\)b1p39
ruijie rg-nis2100-4gt2sfp-hp *
ruijie rg-es216gc-v2_firmware esw_1.0\(1\)b1p27
ruijie rg-es216gc-v2_firmware esw_1.0\(1\)b1p35
ruijie rg-es216gc-v2_firmware esw_1.0\(1\)b1p39
ruijie rg-es216gc-v2 *
ruijie rg-es224gc-v2_firmware esw_1.0\(1\)b1p27
ruijie rg-es224gc-v2_firmware esw_1.0\(1\)b1p35
ruijie rg-es224gc-v2_firmware esw_1.0\(1\)b1p39
ruijie rg-es224gc-v2 *
ruijie rg-es220gs-p_firmware esw_1.0\(1\)b1p27
ruijie rg-es220gs-p_firmware esw_1.0\(1\)b1p35
ruijie rg-es220gs-p_firmware esw_1.0\(1\)b1p39
ruijie rg-es220gs-p *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39, where remote attackers can bypass authentication mechanisms completely by sending a specially crafted HTTP POST request to /user.cgi. This allows attackers to gain unrestricted access to the device's administrative settings.

Impact Analysis

An attacker exploiting this vulnerability can gain full administrative access to the affected device, allowing them to alter settings and potentially take control of the device. This can lead to unauthorized changes, disruption of network operations, and compromise of network security.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-56752. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart