Directory traversal

2020-01-2219:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

JSON

Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with …/…/…/bin/sh as the parameter.

CPENameOperatorVersion
unleashedlt200.7.10.202.94
zonedirector_1200_firmwarelt9.10.2.0.84
zonedirector_1200_firmwarege9.12.0
zonedirector_1200_firmwarelt9.12.3.0.136
zonedirector_1200_firmwarege9.13.0
zonedirector_1200_firmwarelt10.0.1.0.90
zonedirector_1200_firmwarege10.1.0
zonedirector_1200_firmwarelt10.1.2.0.275
zonedirector_1200_firmwarege10.2.0
zonedirector_1200_firmwarelt10.2.1.0.147

Name	Operator	Version
unleashed	lt	200.7.10.202.94
zonedirector_1200_firmware	lt	9.10.2.0.84
zonedirector_1200_firmware	ge	9.12.0
zonedirector_1200_firmware	lt	9.12.3.0.136
zonedirector_1200_firmware	ge	9.13.0
zonedirector_1200_firmware	lt	10.0.1.0.90
zonedirector_1200_firmware	ge	10.1.0
zonedirector_1200_firmware	lt	10.1.2.0.275
zonedirector_1200_firmware	ge	10.2.0
zonedirector_1200_firmware	lt	10.2.1.0.147