EUVD-2019-9432

Malware in sbrugna...

EUVD-2019-9433

Malware in sbrugna...

CVE-2019-19835

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/rcmdstat.jsp URI...

Server side request forgery (ssrf)

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/rcmdstat.jsp URI...

CVE-2019-19835

The CVE-2019-19835 entry describes an SSRF vulnerability in AjaxRestrictedCmdStat (zap) affecting Ruckus Wireless Unleashed through 200.7.10.102.64, enabling a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI. Affected product scope is Ruckus Unleashed firmware; ex...

PT-2020-10250

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64 Description The issue concerns a Server-Side Request Forgery SSRF in the AjaxRestrictedCmdStat component of Ruckus Wireless Unleashed. This allows a remote denial of service via the...

CVE-2019-19836

CVE-2019-19836 affects Ruckus Wireless Unleashed firmware (up to 200.7.10.102.64). The AjaxRestrictedCmdStat component enables a remote code execution via a POST to tools/_rcmdstat.jsp, writing to a specified filename. Impact described as high (CVSS 3.1: CRITICAL; network attack vector, no authen...

PT-2020-10251

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions 200.7.10.102.64 and earlier Description The issue allows remote code execution via a POST request to the "tools/ rcmdstat.jsp" endpoint, which can write to a specified filename. This is made possible by the...