An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://0x.mk/?p=239 |
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-16 17:15
Updated : 2024-07-16 18:00
NVD link : CVE-2019-16639
Mitre link : CVE-2019-16639
CVE.ORG link : CVE-2019-16639
JSON object : View
Products Affected
No product.
CWE
No CWE.