Security Advisory

CVE-2025-56087

8.8
HIGH

Vulnerability Description

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.
Published Date December 11, 2025
Official Source NIST NVD Advisory