EUVD-2020-29305

Malware in sbrugna...

CVE-2020-8438

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat$IFS substring...

CVE-2020-8438

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat$IFS substring...

CVE-2020-8438

The CVE-2020-8438 entry concerns Ruckus ZoneFlex R500 devices (reported as version 104.0.0.0.1347) where an authenticated attacker can execute arbitrary OS commands through the hidden /forms/nslookupHandler form, demonstrated by the nslookuptarget=|cat${IFS} payload. The connected documents provi...

PT-2020-20138

Name of the Vulnerable Software and Affected Versions Ruckus ZoneFlex R500 version 104.0.0.0.1347 Description The issue allows an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form. This can be demonstrated by using the nslookuptarget parameter with...

CVE-2020-8438: Improper Neutralization of Special Elements used in an OS Command

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat$IFS substring...