Vulnerabilities

TI-2020-14374 CVE-2020-22662 · GHSA-4vw8-623p-rpv2

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 41

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01307 Published 2023-01-20 No fix listed CWE-77

TI-2020-14373 CVE-2020-22661 · GHSA-rf9w-rpj6-vm45

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

LOW 36

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00536 Published 2023-01-20 No fix listed CWE-306

TI-2020-14372 CVE-2020-22660 · GHSA-qwhg-pvmj-c2g2

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 40

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00572 Published 2023-01-20 No fix listed CWE-290

TI-2020-14371 CVE-2020-22659 · GHSA-35p7-263x-jc9h

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

LOW 39

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2023-01-20 No fix listed CWE-347

TI-2020-14370 CVE-2020-22658 · GHSA-v9hj-4wpj-hcq2

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 49

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00511 Published 2023-01-20 No fix listed CWE-494

TI-2020-14369 CVE-2020-22657 · GHSA-g43h-746q-4j8p

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 48

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00617 Published 2023-01-20 No fix listed CWE-287

TI-2020-14368 CVE-2020-22656 · GHSA-gp9q-v6ph-4fp7

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

LOW 39

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00504 Published 2023-01-20 No fix listed CWE-1272

TI-2020-14367 CVE-2020-22655 · GHSA-p37c-3rwx-j4gw

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

LOW 39

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00478 Published 2023-01-20 No fix listed CWE-284

TI-2020-14366 CVE-2020-22654 · GHSA-f846-r37x-3h9w

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 49

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2023-01-20 No fix listed CWE-494

TI-2020-14365 CVE-2020-22653 · GHSA-xr9x-fhcv-6qm7

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus…

MEDIUM 50

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00554 Published 2023-01-20 No fix listed CWE-347

TI-2019-14301 CVE-2019-19839 · GHSA-5rfr-mxwv-h8rg

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to…

MEDIUM 48

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03282 Published 2020-01-23 No fix listed CWE-78

TI-2019-14300 CVE-2019-19838 · GHSA-9rrp-35hw-cq78

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to…

MEDIUM 63

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2436 Published 2020-01-23 No fix listed CWE-78

TI-2019-14297 CVE-2019-19835 · GHSA-qm2q-7f9f-m9jj

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64…

LOW 36

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01778 Published 2020-01-23 No fix listed CWE-918

TI-2019-14299 CVE-2019-19837 · GHSA-w5vv-wfg6-5g78

Incorrect access control in the web interface in Ruckus Wireless Unleashed through…

LOW 28

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01994 Published 2020-01-23 No fix listed

TI-2019-14302 CVE-2019-19840 · GHSA-2xqq-rhmm-h69h

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed…

MEDIUM 49

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04126 Published 2020-01-22 No fix listed CWE-787

TI-2019-14304 CVE-2019-19842 · GHSA-c7x9-8r9r-p4q3

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to…

MEDIUM 50

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04959 Published 2020-01-22 No fix listed CWE-78

TI-2019-14303 CVE-2019-19841 · GHSA-h4v3-m4gw-55wq

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to…

MEDIUM 48

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03282 Published 2020-01-22 No fix listed CWE-78

TI-2019-14305 CVE-2019-19843 · GHSA-2rp4-hm5g-p38j

Incorrect access control in the web interface in Ruckus Wireless Unleashed through…

MEDIUM 46

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_ca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0182 Published 2020-01-22 No fix listed CWE-522

TI-2019-14298 CVE-2019-19836 · GHSA-j987-p2x7-f5r3

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows…

MEDIUM 48

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03591 Published 2020-01-22 No fix listed CWE-20

TI-2019-14296 CVE-2019-19834 · GHSA-j2jr-49q4-g8xh

Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64…

LOW 36

Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02211 Published 2020-01-22 No fix listed CWE-22

TI-2017-04079 CVE-2017-6229 · GHSA-g8q7-j99f-7v7m

OS command injection in Brocade Ruckus Networks Unleashed APs and Zone Director

MEDIUM 42

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Comma…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02268 Published 2018-02-14 No fix listed CWE-78

Vulnerabilities

Filters