CVE-2025-68459

HighCVSS 7.2/10Last modified Oct 7, 2026

Description

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
Ruijie Networks Co., Ltd.AP180-PE V3.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180(JA) V1.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180(JP) V1.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180-AC V1.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180-PE V1.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180(JA) V2.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180-AC V2.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180-PE V2.xxAP_RGOS 11.9(4)B1P8 and earlier
Ruijie Networks Co., Ltd.AP180-AC V3.xxAP_RGOS 11.9(4)B1P8 and earlier

References

Timeline

Published
Dec 18, 2025
Last modified
Oct 7, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-68467.3A vulnerability classified as critical has been found in code-projects Simple Forum 1.0. This affects an unknown part of the file /forum_vieCVE-2025-684607.5Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.CVE-2025-684616.1Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG dCVE-2025-684623.2Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.CVE-2025-684634.9Bio.Entrez in Biopython through 186 allows doctype XXE.CVE-2025-684673.4Dark Reader is an accessibility browser extension that makes web pages colors dark. The dynamic dark mode feature of the extension works by CVE-2025-684686.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-dCVE-2025-684693.3ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crasheCVE-2025-68479.8A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forCVE-2025-684706.5React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so thCVE-2025-684716.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-dCVE-2025-684729.1MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal