Cleartext Password Vulnerability in Ruijie EG-2000 Series Gateway

CVE-2019-16638

Summary

The Ruijie EG-2000 series gateway has a security flaw that enables attackers to extract passwords stored in cleartext from the device's configuration file. This vulnerability allows unauthorized users to read and exploit sensitive information by employing straightforward XOR operations to access the contents of the /data/config.text file. This poses significant risks for organizations relying on these gateways, as it could lead to unauthorized access and potential data breaches.

References