Deviceways

Router

Ruijie RG-EW1200G PRO

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

Hardwarev1.1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Release listed · 25.12.6

Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.com
First installation
U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Device details — v1.1 — Source documentation (openwrt.org)

Hardware revision
v1.1

OpenWrt · v1.1

OpenWrt · v1.1 — v1.1 — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.8 (v3.1)

Ruijie RG-EW1200G PRO

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the…

CVE-2025-56123

Affected firmware
RG-EW1200G PRO: V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

CVE-2025-56123 record (github.com) ↗
CVE published

CVSS 8.8 (v3.1)

Ruijie RG-EW1200G PRO

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the…

CVE-2025-56095

Affected firmware
RG-EW1200G PRO: V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.

CVE-2025-56095 record (github.com) ↗
CVE published

CVSS 8.8 (v3.1)

Ruijie RG-EW1200G PRO

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the…

CVE-2025-56090

Affected firmware
RG-EW1200G PRO: V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.

CVE-2025-56090 record (github.com) ↗
Check more security advisories for this device · CVE.org