Ruijie Eg-2000se Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ruijie Eg-2000se Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-16639 — CVSS 9.8 (critical): An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an…
• CVE-2019-16641 — CVSS 8.4 (high): An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use…
• CVE-2019-16638 — CVSS 7.5 (high): An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with…
• CVE-2019-16640 — CVSS 7.5 (high): An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and…