6.1Orta
ruckuswireless ruckus unleashed
A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.
ruckuswireless güvenlik açıkları (CVE)
ruckuswireless için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
7.2Yüksek
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint `/admin/_conf.jsp` writes the Wi-Fi guest password to memory wi…
1.2%EPSS
9.1Kritik
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled input to the shell without adequate validation, enabling a rem…
1.2%EPSS
9.8Kritik
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `stamgr_cfg_adpt_addStaIot` pass a client hostname directly to snprintf as the format string. A remote…
1.3%EPSS
9.8Kritik
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a path-traversal flaw in the web interface lets the server execute attacker-supplied EJS templates outsi…
1.0%EPSS
6.3Orta
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an authenticated request to the management endpoint `/admin/_cmdstat.jsp` discloses the administrator pa…
5.3Orta
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote at…
9.1Kritik
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked from the restricted CLI does not properly sanitize its inpu…
8.8Yüksek
ruckuswireless ruckus unleashed; ruckuswireless ruckus zonedirector
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a …
9.8Kritik
CVE-2023-25717
KEV
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
ruckuswireless ruckus wireless admin; ruckuswireless smartzone ap; commscope ruckus smartzone firmware
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
98%EPSS