Vulnerability · Published Sep 29, 2025 · Assigned by VulDB

CVE-2025-11141Ruijie NBR2100G-E branch_passw.php listAction os command injection

Medium 4.7

In plain English

A medium-severity OS command injection in NBR2100G-E from Ruijie. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)3.8%top 10.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itbox_pi/branch_passw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Ruijie	NBR2100G-E	20250919

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-326218 | Ruijie NBR2100G-E branch_passw.php listAction os command injection vdb-entry, technical-description
VDB-326218 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #658695 | Ruijie NBR2100G-E series Router NBR2100G-E series Router Remote Code Execution third-party-advisory
https://github.com/DavCloudz/cve/issues/2 exploit, issue-tracking