Command injection

2017-10-1317:29:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%

JSON

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.

CPENameOperatorVersion
zonedirector_firmwareeq9.9.205-zd
zonedirector_firmwareeq9.9.212-zd
zonedirector_firmwareeq9.9.216-zd
zonedirector_firmwareeq9.10.218-zd
zonedirector_firmwareeq9.13.103-zd
zonedirector_firmwareeq9.13.209-zd

Name	Operator	Version
zonedirector_firmware	eq	9.9.205-zd
zonedirector_firmware	eq	9.9.212-zd
zonedirector_firmware	eq	9.9.216-zd
zonedirector_firmware	eq	9.10.218-zd
zonedirector_firmware	eq	9.13.103-zd
zonedirector_firmware	eq	9.13.209-zd

References

ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt