Description (CNA)
The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve system configuration files containing credentials and network settings.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ruijienetworks / Ruijie Networks Switch eWeb S29_RGOS | affected eWeb S29_RGOS 11.4(1)B12P11 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/48755
- https://www.ruijienetworks.com/
- https://faruktuygun.com/directorytraversal.html
- https://www.vulncheck.com/advisories/ruijie-networks-switch-eweb-srgos-directory-traversal
ADP enrichment
No English description supplied.
No references supplied.