Ruijie Eg-2000se
4 CVEs affecting Ruijie Eg-2000se. Latest disclosed: 2024-07-16. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16639 | Critical | 9.8 | 2024-07-16 | An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has… |
CVE-2019-16641 | High | 8.4 | 2024-07-16 | An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any a… |
CVE-2019-16640 | High | 7.5 | 2024-07-16 | An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not ch… |
CVE-2019-16638 | High | 7.5 | 2024-07-16 | An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This aff… |