CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1.

Score
CVSS 3.1 9.8 Critical
Status
Analyzed - cve@mitre.org
Published
2024-07-16
Last modified
2024-08-05
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about