Description
The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve system configuration files containing credentials and network settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ruijienetworks | Ruijie Networks Switch eWeb S29_RGOS | eWeb S29_RGOS 11.4(1)B12P11 | — |
References
- ExploitDB-48755 exploit
- Ruijie Networks Official Homepage product
- Directory Traversal Vulnerability Source product
- VulnCheck Advisory: Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal third-party-advisory