Lucene search

K
cve[email protected]CVE-2019-19835
HistoryJan 23, 2020 - 1:15 p.m.

CVE-2019-19835

2020-01-2313:15:11
CWE-918
web.nvd.nist.gov
22
cve-2019-19835
ssrf
ajaxrestrictedcmdstat
ruckus wireless unleashed
nvd
denial of service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.5%

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.

Affected configurations

NVD
Node
ruckuswirelessunleashedRange<200.7.10.202.94
AND
ruckuswirelessc110Match-
OR
ruckuswirelesse510Match-
OR
ruckuswirelessh320Match-
OR
ruckuswirelessh510Match-
OR
ruckuswirelessm510Match-
OR
ruckuswirelessr310Match-
OR
ruckuswirelessr320Match-
OR
ruckuswirelessr510Match-
OR
ruckuswirelessr610Match-
OR
ruckuswirelessr710Match-
OR
ruckuswirelessr720Match-
OR
ruckuswirelesst310Match-
OR
ruckuswirelesst610Match-
OR
ruckuswirelesst710Match-
Node
ruckuswirelesszonedirector_1200_firmwareRange<9.10.2.0.84
OR
ruckuswirelesszonedirector_1200_firmwareRange9.12.09.12.3.0.136
OR
ruckuswirelesszonedirector_1200_firmwareRange9.13.010.0.1.0.90
OR
ruckuswirelesszonedirector_1200_firmwareRange10.1.010.1.2.0.275
OR
ruckuswirelesszonedirector_1200_firmwareRange10.2.010.2.1.0.147
OR
ruckuswirelesszonedirector_1200_firmwareRange10.3.010.3.1.0.21
AND
ruckuswirelesszonedirector_1200Match-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.5%

Related for CVE-2019-19835