Back to Database
Status published
Unknown
CVE-2019-16640
An issue was found in upload.php on the Ruijie EG-2000...
Vulnerability Description
An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16640
Credits & Attribution
No credits recorded in the NVD database.
References
More from ruijie
View All →CVE-2020-21639
Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a...
Medium
6.1
CVE-2020-21627
Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability...
High
7.5
CVE-2019-16641
An issue was found on the Ruijie EG-2000 series gateway....
Unknown
0
CVE-2019-16639
An issue was found on the Ruijie EG-2000 series gateway....
Unknown
0
CVE-2019-16638
An issue was found on the Ruijie EG-2000 series gateway....
Unknown
0
Affected Vendor
ruijie
View all reports →Affected Software
eg-2000se firmware
Vulnerable Versions:
11.1\(1\)b1, 11.9_b11p1
Timeline
Official Publish:
July 16th, 2024
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.