Search vulnerabilities

Results 1

Export CSV
CVE-2020-37015

Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal

The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve system configuration files containing credentials and network settings.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors