Lucene search
HistoryJul 16, 2024 - 5:15 p.m.
CVE-2019-16638
ruijie eg-2000
cleartext passwords
data breach
security vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
36.6%
An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.
Affected configurations
Node
ruijieeg-2000se_firmwareMatch11.1\(1\)b1
ruijieeg-2000se
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ruijie | eg-2000se_firmware | 11.1(1)b1 | cpe:2.3:o:ruijie:eg-2000se_firmware:11.1\(1\)b1:*:*:*:*:*:*:* |
| ruijie | eg-2000se | * | cpe:2.3:h:ruijie:eg-2000se:*:*:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2019-16638
2024-07-16 00:00:00
cve
cve
CVE-2019-16638
2024-07-16 17:15:10
cvelist
cvelist
CVE-2019-16638
2024-07-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
36.6%
Related for NVD:CVE-2019-16638