Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ruckuswireless ruckus wireless admin vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2023-25717
Ruckus Wireless Admin up to and including 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Ruckuswireless Ruckus Wireless Admin
Ruckuswireless Smartzone Ap
Ruckuswireless Smartzone
Ruckuswireless Smartzone 6.1.0.0.935
9.8
CVSSv3
CVE-2019-19841
emfd in Ruckus Wireless Unleashed up to and including 200.7.10.102.64 allows remote malicious users to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.
Ruckuswireless Unleashed
Ruckuswireless Zonedirector 1200 Firmware
9.8
CVSSv3
CVE-2019-19839
emfd in Ruckus Wireless Unleashed up to and including 200.7.10.102.64 allows remote malicious users to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.
Ruckuswireless Unleashed
Ruckuswireless Zonedirector 1200 Firmware
9.8
CVSSv3
CVE-2019-19842
emfd in Ruckus Wireless Unleashed up to and including 200.7.10.102.64 allows remote malicious users to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.
Ruckuswireless Unleashed
Ruckuswireless Zonedirector 1200 Firmware
9.8
CVSSv3
CVE-2019-19838
emfd in Ruckus Wireless Unleashed up to and including 200.7.10.102.64 allows remote malicious users to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.
Ruckuswireless Unleashed
Ruckuswireless Zonedirector 1200 Firmware
7.5
CVSSv3
CVE-2020-13915
Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed up to and including 200.7.10.102.92 allow a remote malicious user to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R...
Ruckuswireless Unleashed Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client side
CVE-2023-31889
template injection
CVE-2024-4304
CVE-2006-4304
CVE-2024-33272
type confusion
CVE-2024-21345
CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
Vulmon