CVE-2019-16640

A vulnerability exists in the upload.php script of the Ruijie EG-2000 series gateway (specifically affecting EG-2000SE running EG_RGOS 11.9 B11P1 ). The UploadFile class fails to properly validate parameters, specifically neglecting to check for %00 and /var/./html . This flaw allows an unauthent...

CVE-2019-16640: Improper Access Control

An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled %00 and /var/./html are not checked, which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EGRGOS 11.9 B11P1...