VYPR
← All advisories
High severity7.5NVD Advisory· Published Jul 16, 2024· Updated Jun 17, 2026

CVE-2019-16640

CVE-2019-16640

Description

An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Ruijie Networks/Eg 2000se Firmware2 versions
    cpe:2.3:o:ruijie:eg-2000se_firmware:11.1\(1\)b1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:ruijie:eg-2000se_firmware:11.1\(1\)b1:*:*:*:*:*:*:*
    • cpe:2.3:o:ruijie:eg-2000se_firmware:11.9_b11p1:*:*:*:*:*:*:*
  • Ruijie Networks/EG-2000 series gatewayllm-create2 versions
    EG_RGOS 11.9 B11P1+ 1 more
    • (no CPE)range: EG_RGOS 11.9 B11P1
    • (no CPE)

Patches

Vulnerability mechanics

References

1
  • 0x.mknvdThird Party Advisory

News mentions

0

No linked articles in our index yet.