{"id":"CVE-2019-16641","aliases":["EUVD-2019-19359","GHSA-v558-hc45-fcjv"],"status":"published","title":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so....","description":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00301,"percentile":0.23063,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2024-07-16T00:00:00Z","modified":"2026-06-17T02:22:28Z","products":[{"vendor":"ruijie","product":"eg-2000se_eg_rgos_firmware"},{"vendor":"ruijie","product":"eg-2000se_firmware"}],"references":[{"url":"https://0x.mk/?p=239","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16641"},{"url":"https://github.com/advisories/GHSA-v558-hc45-fcjv"}],"sources":{"cve":[{"id":"CVE-2019-16641","description":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.","status":"published","published":"2024-07-16T00:00:00Z","modified":"2024-08-12T17:53:14.425Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-19359","description":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.","status":"published","published":"2024-07-16T00:00:00Z","modified":"2024-08-12T17:53:14Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:19.748102Z"}],"ghsa":[{"id":"GHSA-v558-hc45-fcjv","title":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so....","description":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.","status":"published","published":"2024-07-16T18:31:42Z","modified":"2024-08-12T21:31:32Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:57:55.768435Z"}],"nvd":[{"id":"CVE-2019-16641","description":"An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.","status":"published","published":"2024-07-16T17:15:10.6Z","modified":"2026-06-17T02:22:28.527Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:05:49.099942Z"}]}}