Access Control Flaw in Ruijie EG-2000 Series Gateway
CVE-2019-16639

Currently unrated

Key Information:

Vendor
Ruijie Networks
Vendor
CVE Published:
16 July 2024

Summary

The Ruijie EG-2000 Series Gateway has a vulnerability present in its newcli.php API interface that lacks proper access control. This deficiency allows attackers with web interface access to execute TELNET commands and potentially expose administrative passwords by using a specific command substring, mode_url=exec&command=. Affected versions include EG-2000SE and EG_RGOS 11.9 B11P1, highlighting the need for immediate security measures to mitigate exploits.

References

https://0x.mk/?p=239

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-16639 : Access Control Flaw in Ruijie EG-2000 Series Gateway | SecurityVulnerability.io