An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://0x.mk/?p=239 |
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-16 17:15
Updated : 2024-07-16 18:00
NVD link : CVE-2019-16640
Mitre link : CVE-2019-16640
CVE.ORG link : CVE-2019-16640
JSON object : View
Products Affected
No product.
CWE
No CWE.