Lucene search
MitreCVELIST:CVE-2020-26878HistoryOct 26, 2020 - 7:13 p.m.
CVE-2020-26878
2020-10-2619:13:47
mitre
www.cve.org
5
ruckus
command injection
api
web.py
Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.
Related
checkpoint_advisories
checkpoint_advisories
Ruckus IoT Controller Web UI Command Injection (CVE-2020-26878)
2020-11-21 00:00:00
nvd
nvd
CVE-2020-26878
2020-10-26 20:15:14
exploitdb
exploitdb
Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution
2020-11-27 00:00:00
prion
prion
Command injection
2020-10-26 20:15:00
packetstorm
packetstorm
Ruckus IoT Controller 1.5.1.0.21 Remote Code Execution
2020-11-27 00:00:00
cve
cve
CVE-2020-26878
2020-10-26 20:15:14
threatpost
threatpost
ZuoRAT Can Take Over Widely Used SOHO Routers
2022-06-30 17:20:30