CVE-2025-25527

Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ruijie:rg-nbr2600s_firmware:10.3\(4b12\):*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr2600s:-:*:*:*:*:*:*:*

History

13 Aug 2025, 14:07

Type Values Removed Values Added
CPE cpe:2.3:o:ruijie:nbr2600s_firmware:10.3\(4b12\):*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr2600s:-:*:*:*:*:*:*:*
cpe:2.3:h:ruijie:rg-nbr2600s:-:*:*:*:*:*:*:*
cpe:2.3:o:ruijie:rg-nbr2600s_firmware:10.3\(4b12\):*:*:*:*:*:*:*
First Time Ruijie rg-nbr2600s
Ruijie rg-nbr2600s Firmware

20 Jun 2025, 17:08

Type Values Removed Values Added
First Time Ruijie
Ruijie nbr2600s
Ruijie nbr2600s Firmware
References () https://gist.github.com/XiaoCurry/354620285280aca98acba94a9c5fffb6 - () https://gist.github.com/XiaoCurry/354620285280aca98acba94a9c5fffb6 - Broken Link
CPE cpe:2.3:o:ruijie:nbr2600s_firmware:10.3\(4b12\):*:*:*:*:*:*:*
cpe:2.3:h:ruijie:nbr2600s:-:*:*:*:*:*:*:*

11 Feb 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-11 20:15

Updated : 2025-08-13 14:07


NVD link : CVE-2025-25527

Mitre link : CVE-2025-25527


JSON object : View

Products Affected

ruijie

  • rg-nbr2600s_firmware
  • rg-nbr2600s
CWE

No CWE.