Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36870 2 Ruijie, Ruijienetworks 44 Eg3210, Eg3220, Eg3230 and 41 more 2025-11-20 N/A
Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server authentication, or screen mirroring are enabled to gain access or execute commands on affected devices. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-05 UTC.
CVE-2019-16640 1 Ruijie 3 Eg-2000se, Eg-2000se Firmware, Rg-eg2000se Firmware 2025-07-09 7.5 High
An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1.