PT-2020-10249

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64 Description The issue allows a remote attacker to jailbreak the CLI via enable-debug-script-exec with ../../../bin/sh as the parameter. This enables the attacker to execute system...

PT-2020-10251

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions 200.7.10.102.64 and earlier Description The issue allows remote code execution via a POST request to the "tools/ rcmdstat.jsp" endpoint, which can write to a specified filename. This is made possible by the...

PT-2020-10258

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64 Description The issue is related to incorrect access control in the web interface, allowing remote credential fetch via an unauthenticated HTTP request. This request involves a symlink...

PT-2020-10255

Name of the Vulnerable Software and Affected Versions Ruckus Unleashed versions through 200.7.10.102.64 Description A stack-based buffer overflow in zap parse args in zap.c allows remote code execution via an unauthenticated HTTP request. Recommendations For versions through 200.7.10.102.64, upda...

CVE-2019-19840: Out-of-bounds Write

A stack-based buffer overflow in zapparseargs in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request...

CVE-2019-19843: Insufficiently Protected Credentials

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wpstoolcache...

CVE-2019-19836: Improper Input Validation

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/rcmdstat.jsp to write to a specified filename...

CVE-2019-19834: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in ruckuscli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable-debug-script-exec with ../../../bin/sh as the parameter...

Ruckus Unleashed Multiple Vulnerabilities (Jan 2020) - Active Check

Ruckus Unleashed is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ruckus Unleashed Detection (HTTP)

HTTP based detection of Ruckus Unleashed devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6229

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute...

CVE-2017-6229: Improper Neutralization of Special Elements used in an OS Command

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute...

PT-2018-8324

Name of the Vulnerable Software and Affected Versions Ruckus Networks Unleashed AP firmware versions prior to 200.6.10.1.x Ruckus Networks Zone Director firmware versions 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x Description The issue concerns an authenticated Root Command...

CVE-2017-6224

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

CVE-2017-6224

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

Command injection

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

CVE-2017-6224

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

CVE-2017-6224

CVE-2017-6224 affects Ruckus ZoneDirector firmware (ZD9.x, ZD10.0.0.x, ZD10.0.1.x before 10.0.1.0.17 MR1) and Ruckus Unleashed AP firmware (200.0.x–200.4.x). Local authenticated users can inject OS commands by placing them in the Certificate Generation Request Common Name field, leading to arbitr...

CVE-2017-6224: Improper Neutralization of Special Elements used in an OS Command

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

PT-2017-16952

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Zone Director Controller firmware versions ZD9.x through ZD10.0.1.x less than 10.0.1.0.17 MR1 release Ruckus Wireless Unleashed AP Firmware versions 200.0.x through 200.4.x Description The issue allows local authenticated users...