CVE-2019-19840

🗓️ 22 Jan 2020 20:32:36Reported by mitreType

A stack-based buffer overflow in zap_parse_args in zap.c in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-19840	23 Jan 202001:38	–	circl
CNVD	Ruckus Unleashed zap_parse_args Stack Overflow Vulnerability	4 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-19840	22 Jan 202020:32	–	cvelist
NVD	CVE-2019-19840	22 Jan 202021:15	–	nvd
OpenVAS	Ruckus Unleashed Multiple Vulnerabilities (Jan 2020) - Active Check	8 Jan 202000:00	–	openvas
Prion	Stack overflow	22 Jan 202021:15	–	prion
RedhatCVE	CVE-2019-19840	22 May 202510:09	–	redhatcve

NVD

Node

ruckuswireless unleashedRange<200.7.10.202.94

AND

ruckuswireless c110Match-

ruckuswireless e510Match-

ruckuswireless h320Match-

ruckuswireless h510Match-

ruckuswireless m510Match-

ruckuswireless r310Match-

ruckuswireless r320Match-

ruckuswireless r510Match-

ruckuswireless r610Match-

ruckuswireless r710Match-

ruckuswireless r720Match-

ruckuswireless t310Match-

ruckuswireless t610Match-

ruckuswireless t710Match-

Node

ruckuswireless zonedirector_1200_firmwareRange<9.10.2.0.84

ruckuswireless zonedirector_1200_firmwareRange9.12.0–9.12.3.0.136

ruckuswireless zonedirector_1200_firmwareRange9.13.0–10.0.1.0.90

ruckuswireless zonedirector_1200_firmwareRange10.1.0–10.1.2.0.275

ruckuswireless zonedirector_1200_firmwareRange10.2.0–10.2.1.0.147

ruckuswireless zonedirector_1200_firmwareRange10.3.0–10.3.1.0.21

AND

ruckuswireless zonedirector_1200Match-

Source	Link
alephsecurity	www.alephsecurity.com/2020/01/14/ruckus-wireless
fahrplan	www.fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html
ruckuswireless	www.ruckuswireless.com/security/299/view/txt

21 Nov 2024 04:35Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.21704

CWE-787