VulnerabilityDeferred

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability.

HIGH 8.6EPSS 1.43%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

CVSS 4.0: 8.6 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 1.43% probability · 72th percentile
CISA KEV: Not listed
Weakness: CWE-78
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/vu/JVNVU94068946/
https://www.ruijie.com.cn/gy/xw-aqtg-gw/930282/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.