CVE-2019-16638

HIGH

Ruijie EG-2000SE EG_RGOS 11.1(1)B1 - Cleartext Storage of Sensitive Information in Config File

Title source: llm

Description

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://0x.mk/?p=239

Scores

CVSS v3 7.5

EPSS 0.0039

EPSS Percentile 30.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-312

Status published

Products (1)

ruijie/eg-2000se_firmware 11.1\(1\)b1

Published Jul 16, 2024

Tracked Since Feb 18, 2026