Command injection

2020-01-2315:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.2%

JSON

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.

CPENameOperatorVersion
unleashedlt200.7.10.202.94
zonedirector_1200_firmwarelt9.10.2.0.84
zonedirector_1200_firmwarege9.12.0
zonedirector_1200_firmwarelt9.12.3.0.136
zonedirector_1200_firmwarege9.13.0
zonedirector_1200_firmwarelt10.0.1.0.90
zonedirector_1200_firmwarege10.1.0
zonedirector_1200_firmwarelt10.1.2.0.275
zonedirector_1200_firmwarege10.2.0
zonedirector_1200_firmwarelt10.2.1.0.147

Name	Operator	Version
unleashed	lt	200.7.10.202.94
zonedirector_1200_firmware	lt	9.10.2.0.84
zonedirector_1200_firmware	ge	9.12.0
zonedirector_1200_firmware	lt	9.12.3.0.136
zonedirector_1200_firmware	ge	9.13.0
zonedirector_1200_firmware	lt	10.0.1.0.90
zonedirector_1200_firmware	ge	10.1.0
zonedirector_1200_firmware	lt	10.1.2.0.275
zonedirector_1200_firmware	ge	10.2.0
zonedirector_1200_firmware	lt	10.2.1.0.147