CVE-2025-56752: Remote Attackers Can Gain Full Administrative Access to Affected Ruijie Networks Devices Without Authentication

CVE-2025-56752 is a critical vulnerability in Ruijie Reyee RG-ES series switches that could allow remote attackers to modify the device login password and gain full administrative access without authentication. The flaw, which carries a CVSS score of 9.4, affects multiple models across the RG-ES and RG-NIS series, including the RG-ES216GC-V2, RG-ES224GC-V2, RG-ES220GS-P, RG-ES228GS-P and several others listed in the report.

According to Ruijie’s advisory, attackers can exploit the issue to modify the device’s eWeb login password, enabling complete control over configuration, traffic and device behaviour. Ruijie has released patched firmware versions and users should upgrade to ESW_1.0(1)B1P48 or later, or Release(12142711) or Release(12162701) or later, depending on the affected model.

Devices that support automatic updates will prompt the fix, or administrators can download updated firmware from Ruijie Networks’ website or via local after‑sales support. Organizations should update immediately, restrict management interface access to trusted networks, enable multi‑layer authentication where possible, and monitor for suspicious configuration changes or login attempts.