Skip to content
OpenAdvisories
High · 7.2 CVE-2025-68459 EUVD-2025-204038GHSA-fww6-h55r-7gx6

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability.…

Published Dec 18, 2025 · Updated Dec 18, 2025 · Assigned by jpcert

Description

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

Affected products

VendorProductAffectedFixed
Ruijie Networks AP180-PE V3.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180(JA) V1.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180(JP) V1.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180-AC V1.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180-PE V1.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180(JA) V2.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180-AC V2.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180-PE V2.xx AP_RGOS 11.9(4)B1P8 and earlier —
Ruijie Networks AP180-AC V3.xx AP_RGOS 11.9(4)B1P8 and earlier —

References