CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16638: Cleartext Storage of Sensitive Information

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16640

A vulnerability exists in the upload.php script of the Ruijie EG-2000 series gateway (specifically affecting EG-2000SE running EG_RGOS 11.9 B11P1 ). The UploadFile class fails to properly validate parameters, specifically neglecting to check for %00 and /var/./html . This flaw allows an unauthent...

CVE-2019-16641

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16638

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16641

The Ruijie EG-2000 series gateway (specifically version EG-2000SE EG_RGOS 11.1(1)B1 ) is vulnerable to a stack-based buffer overflow in the client.so file. A malicious actor can exploit this by utilizing the login.php script to bypass authentication and log into any account without a password, po...

CVE-2019-16640: Improper Access Control

An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled %00 and /var/./html are not checked, which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EGRGOS 11.9 B11P1...

CVE-2022-33128

RG-EG series gateway EG350 EGRGOS 11.16 was discovered to contain a SQL injection vulnerability via the function getalarmAction at /alarmpi/alarmService.php...

Sql injection

RG-EG series gateway EG350 EGRGOS 11.16 was discovered to contain a SQL injection vulnerability via the function getalarmAction at /alarmpi/alarmService.php...

CVE-2022-33128

RG-EG series gateway EG350 EGRGOS 11.16 was discovered to contain a SQL injection vulnerability via the function getalarmAction at /alarmpi/alarmService.php...

CVE-2022-33128

The CVE-2022-33128 entry describes a SQL injection in the RG-EG Series gateway RG350 (EG350/EG_RGOS 11.1(6)). The vulnerability resides in the alarmService.php function get_alarmAction, enabling attackers to submit crafted SQL via a request to /alarm_pi/alarmService.php. Reported impact across so...

CVE-2022-33128: Improper Neutralization of Special Elements used in an SQL Command

RG-EG series gateway EG350 EGRGOS 11.16 was discovered to contain a SQL injection vulnerability via the function getalarmAction at /alarmpi/alarmService.php...