What’s Vulnerable › Vulnerabilities

CVE-2019-16638

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-16 · updated 2026-06-17
• Weakness: CWE-312

Description

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.

Affected products

• Ruijie Eg-2000Se Firmware: 11.1(1)b1

References

• https://0x.mk/?p=239
• https://0x.mk/?p=239

Get alerted when CVE-2019-16638 or the next vulnerability affects your stack