CVE-2019-16638: Ruijie Eg-2000se Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.

Affected products

• Ruijie Eg-2000se Firmware: version 11.1(1)b1 only

Published 2024-07-16. Last modified 2026-06-17.