PatchSiren cyber security CVE debrief
CVE-2020-37015 Ruijienetworks CVE debrief
A directory traversal vulnerability in Ruijie Networks Switch eWeb S29_RGOS 11.4 allows unauthenticated attackers to access sensitive configuration files via the /download.do endpoint. The vulnerability was disclosed in January 2026 and last modified in May 2026. The CVSS 4.0 vector indicates network attack vector with low attack complexity, low privileges required, and high confidentiality impact to the vulnerable system. The vulnerability is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory).
- Vendor
- Ruijienetworks
- Product
- Ruijie Networks Switch eWeb S29_RGOS
- CVSS
- HIGH 7.1
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-01-29
- Original CVE updated
- 2026-05-26
- Advisory published
- 2026-01-29
- Advisory updated
- 2026-05-26
Who should care
Network administrators managing Ruijie Networks switches, security teams responsible for network infrastructure protection, and organizations using S29_RGOS 11.4 firmware in their environments.
Technical summary
The /download.do endpoint in Ruijie Networks Switch eWeb S29_RGOS 11.4 fails to properly sanitize file path parameters, allowing path traversal sequences ('../') to access files outside the intended directory. This enables unauthenticated attackers to retrieve system configuration files containing credentials and network settings. The vulnerability requires low privileges and has low attack complexity, making it relatively straightforward to exploit. The high confidentiality impact rating reflects the sensitivity of exposed configuration data.
Defensive priority
HIGH
Recommended defensive actions
- Apply vendor patches from Ruijie Networks when available
- Restrict network access to switch management interfaces
- Implement network segmentation to limit exposure of management plane
- Monitor for unauthorized access attempts to /download.do endpoint
- Review and rotate credentials that may have been exposed through configuration file access
Evidence notes
The vulnerability affects Ruijie Networks Switch eWeb S29_RGOS version 11.4. The disclosure was made by [email protected] with references to an advisory from VulnCheck and a researcher disclosure. The NVD entry shows vulnStatus as 'Deferred'. The CVSS 4.0 score of 7.1 reflects high confidentiality impact with network accessibility.
Official resources
2026-01-29T15:16:08.907Z