CVE-2025-56752: Ruijie Rg-es205gc Firmware authentication bypass (CVSS 9.4)

Description

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityLow

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Affected products

Ruijie Rg-es205gc Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es205gc-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es206gc-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35

Ruijie Rg-es206gs-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es206mg-p Firmwareesw_1.0\(1\)b1p42_release\(12142711\)

Ruijie Rg-es208gc Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es209gc-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es209mg-p Firmwareesw_1.0\(1\)b1p42_release\(12142711\)

Ruijie Rg-es210gc-lp Firmwareesw_1.0\(1\)b1p27

Ruijie Rg-es210gs-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es216gc Firmwareesw_1.0\(1\)b1p27

Ruijie Rg-es216gc-v2 Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es218gc-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35

Ruijie Rg-es220gs-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es224gc Firmwareesw_1.0\(1\)b1p27

Ruijie Rg-es224gc-v2 Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-es226gc-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35

Ruijie Rg-es228gs-p Firmwareesw_1.0\(1\)b1p27 · esw_1.0\(1\)b1p35 · esw_1.0\(1\)b1p39

Ruijie Rg-nis2100-4gt2sfp-hp Firmwareesw_1.0\(1\)b1p39

Ruijie Rg-nis2100-8gt2sfp-hp Firmwareesw_1.0\(1\)b1p39

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

https://github.com/TNCX-byte/Vulnerability_Research/blob/main/CVE-2025-56752/README.mdThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2025-56752 being actively exploited?

CVE-2025-56752 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.53%.

How severe is CVE-2025-56752?

CVE-2025-56752 has a CVSS 3.1 base score of 9.4, rated critical. EPSS estimates a 0.53% probability of exploitation.

Which products are affected by CVE-2025-56752?

Affected products include Ruijie Rg-es205gc Firmware, Ruijie Rg-es205gc-p Firmware, Ruijie Rg-es206gc-p Firmware, Ruijie Rg-es206gs-p Firmware, Ruijie Rg-es206mg-p Firmware, and 15 more.

How do I fix CVE-2025-56752?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-56752 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo