CVE-2019-16639 - CVE House
Back to Database
Status published Unknown CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway....

Vulnerability Description

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16639

Credits & Attribution

No credits recorded in the NVD database.

References

More from ruijie

View All →
CVE-2020-21639
Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a...
Medium 6.1
CVE-2020-21627
Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability...
High 7.5
CVE-2019-16641
An issue was found on the Ruijie EG-2000 series gateway....
Unknown 0
CVE-2019-16640
An issue was found in upload.php on the Ruijie EG-2000...
Unknown 0
CVE-2019-16638
An issue was found on the Ruijie EG-2000 series gateway....
Unknown 0

Affected Vendor

Affected Software

eg-2000se firmware
Vulnerable Versions:
11.9_b11p1

Timeline

Official Publish: July 16th, 2024
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.