{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-02T15:09:48.386","vulnerabilities":[{"cve":{"id":"CVE-2019-16640","sourceIdentifier":"cve@mitre.org","published":"2024-07-16T17:15:10.513","lastModified":"2025-07-09T17:00:25.463","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1."},{"lang":"es","value":"Se encontró un problema en upload.PHP en el gateway de la serie Ruijie EG-2000. Un parámetro pasado a la clase UploadFile se maneja incorrectamente (%00 y /var/./html no se verifican), lo que puede permitir a un atacante subir cualquier archivo al gateway. Esto afecta a EG-2000SE EG_RGOS 11.9 B11P1."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ruijie:eg-2000se_firmware:11.1\\(1\\)b1:*:*:*:*:*:*:*","matchCriteriaId":"431E2CEF-7F86-4CA8-AE12-EDE8C9A80712"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ruijie:eg-2000se_firmware:11.9_b11p1:*:*:*:*:*:*:*","matchCriteriaId":"86ACA09C-0D60-4FA3-830C-16CB8A75A654"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ruijie:eg-2000se:-:*:*:*:*:*:*:*","matchCriteriaId":"35ED8F72-0FBB-4155-A7A4-24CF413BE576"}]}]}],"references":[{"url":"https://0x.mk/?p=239","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://0x.mk/?p=239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}