CVE-2020-26878: Improper Neutralization of Special Elements used in an OS Command

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...

PT-2020-16525

Name of the Vulnerable Software and Affected Versions Ruckus versions through 1.5.1.0.21 Description The issue allows an authenticated user to inject arbitrary commands via the /service/v1/createUser API endpoint, which are then executed as the root user through web.py. Recommendations For versio...