Server side request forgery (ssrf)

2020-01-2313:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.

CPENameOperatorVersion
unleashedlt200.7.10.202.94
zonedirector_1200_firmwarelt9.10.2.0.84
zonedirector_1200_firmwarege9.12.0
zonedirector_1200_firmwarelt9.12.3.0.136
zonedirector_1200_firmwarege9.13.0
zonedirector_1200_firmwarelt10.0.1.0.90
zonedirector_1200_firmwarege10.1.0
zonedirector_1200_firmwarelt10.1.2.0.275
zonedirector_1200_firmwarege10.2.0
zonedirector_1200_firmwarelt10.2.1.0.147

Name	Operator	Version
unleashed	lt	200.7.10.202.94
zonedirector_1200_firmware	lt	9.10.2.0.84
zonedirector_1200_firmware	ge	9.12.0
zonedirector_1200_firmware	lt	9.12.3.0.136
zonedirector_1200_firmware	ge	9.13.0
zonedirector_1200_firmware	lt	10.0.1.0.90
zonedirector_1200_firmware	ge	10.1.0
zonedirector_1200_firmware	lt	10.1.2.0.275
zonedirector_1200_firmware	ge	10.2.0
zonedirector_1200_firmware	lt	10.2.1.0.147