CVE-2019-16639

The Ruijie EG-2000SE gateway running EG_RGOS 11.9 B11P1 is vulnerable to improper neutralization of special elements used in OS commands. The newcli.php API interface lacks sufficient access control and fails to neutralize special elements in commands. An attacker with web interface access can ex...