CVE-2019-19841

🗓️ 22 Jan 2020 20:29:54Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

Ruckus Wireless Unleashed emfd Remote Command Executio

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-19841	23 Jan 202001:38	–	circl
Cvelist	CVE-2019-19841	22 Jan 202020:29	–	cvelist
EUVD	EUVD-2019-9438	7 Oct 202500:30	–	euvd
NVD	CVE-2019-19841	22 Jan 202021:15	–	nvd
OpenVAS	Ruckus Unleashed Multiple Vulnerabilities (Jan 2020) - Active Check	8 Jan 202000:00	–	openvas
Prion	Command injection	22 Jan 202021:15	–	prion
RedhatCVE	CVE-2019-19841	22 May 202504:56	–	redhatcve

NVD

Node

ruckuswireless unleashedRange<200.7.10.202.94

AND

ruckuswireless c110Match-

OR

ruckuswireless e510Match-

OR

ruckuswireless h320Match-

OR

ruckuswireless h510Match-

OR

ruckuswireless m510Match-

OR

ruckuswireless r310Match-

OR

ruckuswireless r320Match-

OR

ruckuswireless r510Match-

OR

ruckuswireless r610Match-

OR

ruckuswireless r710Match-

OR

ruckuswireless r720Match-

OR

ruckuswireless t310Match-

OR

ruckuswireless t610Match-

OR

ruckuswireless t710Match-

Node

ruckuswireless zonedirector_1200_firmwareRange<9.10.2.0.84

OR

ruckuswireless zonedirector_1200_firmwareRange9.12.0–9.12.3.0.136

OR

ruckuswireless zonedirector_1200_firmwareRange9.13.0–10.0.1.0.90

OR

ruckuswireless zonedirector_1200_firmwareRange10.1.0–10.1.2.0.275

OR

ruckuswireless zonedirector_1200_firmwareRange10.2.0–10.2.1.0.147

OR

ruckuswireless zonedirector_1200_firmwareRange10.3.0–10.3.1.0.21

AND

ruckuswireless zonedirector_1200Match-

Source	Link
alephsecurity	www.alephsecurity.com/2020/01/14/ruckus-wireless
ruckuswireless	www.ruckuswireless.com/security/299/view/txt
fahrplan	www.fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html

Parameter	Position	Path	Description	CWE
mac	request body	admin/_cmdstat.jsp	Remote OS command execution via POST to admin/_cmdstat.jsp using mac attribute and xcmd=packet-capture.	CWE-78
xcmd	request body	admin/_cmdstat.jsp	Remote OS command execution via POST to admin/_cmdstat.jsp using mac attribute and xcmd=packet-capture.	CWE-78

21 Nov 2024 04:35Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 210

EPSS0.04274

cve 2019 19841 ruckus wireless unleashed remote command execution os commands post request xcmd packet-capture admin _cmdstat.jsp mac attribute