CVE-2025-58778
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure, altering the system configurations, or causing a denial of service (DoS) condition.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RG-EST300
- Vendor
- Ruijie Networks Co., Ltd.
- Product
- RG-EST300
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| AP_3.0(1)B2P18_EST300_06210514 | affected | Unavailable | Unavailable | Unavailable | None listed |
| AP_3.0(1)B2P10_EST300_06151523 | affected | Unavailable | Unavailable | Unavailable | None listed |
| AP_3.0(1)B2P10_EST300_05232216 | affected | Unavailable | Unavailable | Unavailable | None listed |
| and AP_3.0(1)B2P10_EST300_05220814 | affected | Unavailable | Unavailable | Unavailable | None listed |