Latest vulnerabilities for "ruijie eg-2000se firmware"

Where

Sort:

Versions

11.1\(1\)b1

Ruijie Eg-2000se FirmwareAn issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext store…

Risk 43

Severity

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EGRGOS 11.1(1)B1.

First published (updated )

CVE-2019-16638

Ruijie EG-2000SEOS Command Injection

Risk 86

Severity

9.8

OS Command Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE EGRGOS 11.9 B11P1.

First published (updated )

CVE-2019-16639

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.