CVE-2025-58778

State: Published
Severity: 8.6 High
Published: Oct 16, 2025
Updated: Oct 16, 2025
Reserved: Sep 5, 2025

Description

Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure, altering the system configurations, or causing a denial of service (DoS) condition.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	jpcert
3.0	7.2 High	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	jpcert

Weaknesses

CWE-912 Hidden functionality

Affected Products

Product	Versions
RG-EST300Ruijie Networks Co., Ltd.	AP_3.0(1)B2P18_EST300_06210514Affected AP_3.0(1)B2P10_EST300_06151523Affected AP_3.0(1)B2P10_EST300_05232216Affected and AP_3.0(1)B2P10_EST300_05220814Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.