CVE-2019-16639

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
ruijie	eg-2000se_eg_rgos	11.9b11p1

References

https://0x.mk/?p=239Exploit, Third Party Advisory
https://0x.mk/?p=239Exploit, Third Party Advisory

Timeline

Published: Jul 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2019

CVE-2019-16647.8A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all CVE-2019-166407.5An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /va CVE-2019-166418.4An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.ph CVE-2019-166429.8App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.CVE-2019-166435.4An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.CVE-2019-166449.8App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.CVE-2019-166458.6An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing CVE-2019-166477.2Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.CVE-2019-1664910.0On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service CVE-2019-16656.1A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct CVE-2019-1665010.0On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket fil CVE-2019-166515.3An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have insufficient protectio