CVE-2019-16638

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2024-07-16

Last modified

2025-03-18

Weaknesses

CWE-312

Affected products

• Eg-2000se Firmware (Ruijie)

References

• https://0x.mk/?p=239