Directory Traversal Vulnerability Sourceproduct
https://faruktuygun.com/directorytraversal.html CVE-2020-37015
HIGH
Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
Record summary
CVE-2020-37015 has a selected CVSS score of 7.1 (high); EIP currently links 1 catalogued exploit.
Description
The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve system configuration files containing credentials and network settings.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Ruijie Networks Switch eWeb S29_RGOSBrowse Ruijienetworks / Ruijie Networks Switch eWeb S29_RGOS | CVE List | eWeb S29_RGOS 11.4(1)B12P11 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBRuijie Networks Switch eWeb S29_RGOS 11.4 - Directory TraversalExploitDB exploitby TuygunNot analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-37015 ExploitDB-48755exploit
https://www.exploit-db.com/exploits/48755 Ruijie Networks Official Homepageproduct
https://www.ruijienetworks.com/ VulnCheck Advisory: Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory TraversalThird-party advisory
https://www.vulncheck.com/advisories/ruijie-networks-switch-eweb-srgos-directory-traversal