Remote code execution

2020-01-2219:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.048 Low

EPSS

Percentile

92.8%

JSON

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.

CPENameOperatorVersion
unleashedlt200.7.10.202.94
zonedirector_1200_firmwarelt9.10.2.0.84
zonedirector_1200_firmwarege9.12.0
zonedirector_1200_firmwarelt9.12.3.0.136
zonedirector_1200_firmwarege9.13.0
zonedirector_1200_firmwarelt10.0.1.0.90
zonedirector_1200_firmwarege10.1.0
zonedirector_1200_firmwarelt10.1.2.0.275
zonedirector_1200_firmwarege10.2.0
zonedirector_1200_firmwarelt10.2.1.0.147

Name	Operator	Version
unleashed	lt	200.7.10.202.94
zonedirector_1200_firmware	lt	9.10.2.0.84
zonedirector_1200_firmware	ge	9.12.0
zonedirector_1200_firmware	lt	9.12.3.0.136
zonedirector_1200_firmware	ge	9.13.0
zonedirector_1200_firmware	lt	10.0.1.0.90
zonedirector_1200_firmware	ge	10.1.0
zonedirector_1200_firmware	lt	10.1.2.0.275
zonedirector_1200_firmware	ge	10.2.0
zonedirector_1200_firmware	lt	10.2.1.0.147