CVE-2025-68459
- State
- Published
- Severity
- 8.6 High
- Published
- Dec 18, 2025
- Updated
- Dec 18, 2025
- Reserved
- Dec 17, 2025
Description
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-78 Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
AP180-PE V3.xxRuijie Networks Co., Ltd. |
|
AP180(JA) V1.xxRuijie Networks Co., Ltd. |
|
AP180(JP) V1.xxRuijie Networks Co., Ltd. |
|
AP180-AC V1.xxRuijie Networks Co., Ltd. |
|
AP180-PE V1.xxRuijie Networks Co., Ltd. |
|
AP180(JA) V2.xxRuijie Networks Co., Ltd. |
|
AP180-AC V2.xxRuijie Networks Co., Ltd. |
|
AP180-PE V2.xxRuijie Networks Co., Ltd. |
|
AP180-AC V3.xxRuijie Networks Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.