6.1Media
ruckuswireless ruckus unleashed
A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.
Vulnerabilidades de ruckuswireless (CVE)
Registros CVE publicados para ruckuswireless, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
7.2Alta
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint `/admin/_conf.jsp` writes the Wi-Fi guest password to memory wi…
1.2%EPSS
9.1Crítica
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled input to the shell without adequate validation, enabling a rem…
1.2%EPSS
9.8Crítica
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `stamgr_cfg_adpt_addStaIot` pass a client hostname directly to snprintf as the format string. A remote…
1.3%EPSS
9.8Crítica
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface lets the server execute attacker-supplied EJS templates outsi…
1.0%EPSS
6.3Media
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management endpoint `/admin/_cmdstat.jsp` discloses the administrator pa…
5.3Media
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote at…
9.1Crítica
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked from the restricted CLI does not properly sanitize its inpu…
8.8Alta
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a …
9.8Crítica
CVE-2023-25717
KEV
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
ruckuswireless ruckus wireless admin; ruckuswireless smartzone ap; commscope ruckus smartzone firmware
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
98%EPSS