Improper access control

Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information that can be used for a jailbreak via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R71...

Code injection

webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service Segmentation fault to the webserver via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300,...

CVE-2020-13919

CVE-2020-13919 affects multiple Ruckus Wireless Unleashed models (C110, E510, H320, H510, M510, R320, R310, R500, R510, R600, R610, R710, R720, R750, T300, T301n/s, T310c/d/n/s, T610, T710, T710s). Root cause: vulnerability in emfd/libemf that enables remote command injection via a crafted HTTP r...

CVE-2020-13919

emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610,...

CVE-2020-13918

Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information that can be used for a jailbreak via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R71...

CVE-2020-13918

CVE-2020-13918 affects Ruckus Wireless Unleashed devices (C110, E510, H320, H510, M510, R320, R310, R500, R510/R600, R610, R710, R720, R750, T300, T301n, T301s, T310c/d/n/s, T610, T710/T710s) due to incorrect access control in webs, enabling an unauthenticated remote attacker to leak system infor...

CVE-2020-13917

rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a crafted CLI command. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n,...

CVE-2020-13917

CVE-2020-13917 affects Ruckus Wireless Unleashed devices (models including C110, E510, H320, H510, M510, R320/R310/R500/R510/R600/R610/R710/R720/R750, T300/T301n/T301s/T310c/T310d/T310n/T310s/T610/T710/T710s) via rkscli. The root cause is a command-injection vulnerability in the CLI exposed by cr...

CVE-2020-13916

A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c,...

CVE-2020-13916

The CVE-2020-13916 entry describes a stack buffer overflow in the Webs service of Ruckus Wireless Unleashed (through 200.7.10.102.92) that allows a remote attacker to execute code via an unauthenticated crafted HTTP request. Affected devices include C110, E510, H320, H510, M510, R320, R310, R500,...

CVE-2020-13915

CVE-2020-13915 concerns Ruckus Wireless Unleashed firmware versions affecting a broad range of devices (e.g., C110, E510, H320, H510, M510, R320, R310, R500, R510/R600, R610, R710, R720, R750, T300, T301n/s, T310c/d/n/s, T610, T710/ T710s). The root cause is insecure permissions in emfd/libemf, e...

CVE-2020-13915

Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n,...

CVE-2020-13914

CVE-2020-13914 affects Ruckus Wireless Unleashed devices (C110, E510, H320, H510, M510, R320, R310, R500, R510, R600, R610, R710, R720, R750, T300, T301n, T301s, T310c/d/n/s, T610, T710, T710s) running firmware up to 200.7.10.102.92. The vulnerability allows an unauthenticated remote attacker to ...

CVE-2020-13914

webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service Segmentation fault to the webserver via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300,...

CVE-2020-13913

CVE-2020-13913 is an XSS in the emfd component of Ruckus Wireless Unleashed firmware up to 200.7.10.102.92. An unauthenticated crafted HTTP request can cause JavaScript execution, affecting numerous devices (C110, E510, H320, H510, M510, R320, R310, R500, R510, R600, R610, R710, R720, R750, T300,...

CVE-2020-13913

An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c,...

Ruckus Wireless Unleashed emfd Arbitrary OS Command Execution Vulnerability

Ruckus Wireless Unleashed is a wireless virtual control device. The Ruckus Wireless Unleashed emfd admin/cmdstat.jsp fails to properly handle the xcmd=import-category attribute, which can be exploited by a remote attacker to submit a special POST request that can be used in the application contex...

CVE-2019-19838

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/cmdstat.jsp via the uploadFile attribute...

CVE-2019-19839

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/cmdstat.jsp via the uploadFile attribute...

CVE-2019-19838

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/cmdstat.jsp via the uploadFile attribute...