CVE-2019-16639

9.8 criticalEPSS 0.8%

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-07-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruijie:eg-2000se_firmware

References

https://0x.mk/?p=239
https://0x.mk/?p=239

Check your stack JSON