CVE-2019-16638

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2019-16638

The CVE-2019-16638 affects Ruijie EG-2000 series gateways (EG-2000SE, EG_RGOS) with version 11.1(1)B1. Description: an attacker can dump cleartext passwords stored in /data/config.text via simple XORs. Impact is credential disclosure with restricted integrity/availability. The Red Hat/RedHat and ...