Vulnerability · Published Dec 18, 2025 · Assigned by jpcert
CVE-2025-68459
High 7.2
In plain English
A high-severity OS command injection in AP180-AC V1.xx from Ruijie Networks Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)1.4%top 27.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ruijie Networks Co., Ltd. | AP180-PE V3.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180(JA) V1.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180(JP) V1.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180-AC V1.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180-PE V1.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180(JA) V2.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180-AC V2.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180-PE V2.xx | AP_RGOS 11.9(4)B1P8 and earlier |
| Ruijie Networks Co., Ltd. | AP180-AC V3.xx | AP_RGOS 11.9(4)B1P8 and earlier |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H