CVE-2025-58778

Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure, altering the system configurations, or causing a denial of service (DoS) condition.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/jp/JVN72648885/
https://www.ruijie.com.cn/gy/xw-aqtg-gw/929848/
https://www.ruijie.com/en-global/support/productLifecycle

Configurations

No configuration.

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Múltiples versiones de RG-EST300 proporcionadas por Ruijie Networks proporcionan funcionalidad de servidor SSH. No está documentado en el manual y está habilitado en la configuración inicial. Cualquiera con conocimiento de las credenciales relacionadas puede iniciar sesión en el dispositivo afectado, lo que lleva a la revelación de información, la alteración de las configuraciones del sistema o a causar una condición de denegación de servicio (DoS).

Information

Published : 2025-10-16 06:15

Updated : 2026-10-08 11:10

NVD link : CVE-2025-58778

Mitre link : CVE-2025-58778

CVE.ORG link : CVE-2025-58778

JSON object : View

Products Affected

No product.

CWE

CWE-912

Hidden Functionality

{"id": "CVE-2025-58778", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "vultures@jpcert.or.jp"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58778", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-16T14:30:56.658999Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "vultures@jpcert.or.jp", "affectedData": [{"vendor": "Ruijie Networks Co., Ltd.", "product": "RG-EST300", "versions": [{"status": "affected", "version": "AP_3.0(1)B2P18_EST300_06210514"}, {"status": "affected", "version": "AP_3.0(1)B2P10_EST300_06151523"}, {"status": "affected", "version": "AP_3.0(1)B2P10_EST300_05232216"}, {"status": "affected", "version": "and AP_3.0(1)B2P10_EST300_05220814"}]}]}], "published": "2025-10-16T06:15:37.533", "references": [{"url": "https://jvn.jp/en/jp/JVN72648885/", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.ruijie.com.cn/gy/xw-aqtg-gw/929848/", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.ruijie.com/en-global/support/productLifecycle", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "description": [{"lang": "en", "value": "CWE-912"}]}], "descriptions": [{"lang": "en", "value": "Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure, altering the system configurations, or causing a denial of service (DoS) condition."}, {"lang": "es", "value": "M\u00faltiples versiones de RG-EST300 proporcionadas por Ruijie Networks proporcionan funcionalidad de servidor SSH. No est\u00e1 documentado en el manual y est\u00e1 habilitado en la configuraci\u00f3n inicial. Cualquiera con conocimiento de las credenciales relacionadas puede iniciar sesi\u00f3n en el dispositivo afectado, lo que lleva a la revelaci\u00f3n de informaci\u00f3n, la alteraci\u00f3n de las configuraciones del sistema o a causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS)."}], "lastModified": "2026-10-08T11:10:00.250", "sourceIdentifier": "vultures@jpcert.or.jp"}