Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 13/10/2017 Updated: 03/10/2019

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ruckuswireless zonedirector_firmware zd9.9.0.0.212
ruckuswireless zonedirector_firmware zd9.9.0.0.216
ruckuswireless zonedirector_firmware zd9.10.0.0.218
ruckuswireless zonedirector_firmware zd9.13.0.0.103
ruckuswireless zonedirector_firmware zd9.9.0.0.205
ruckuswireless zonedirector_firmware zd9.13.0.0.209
ruckuswireless unleashed_firmware 200.1.9.12.55
ruckuswireless unleashed_firmware 200.1
ruckuswireless unleashed_firmware 200.3
ruckuswireless unleashed_firmware 200.4.9.13
ruckuswireless unleashed_firmware 200.3.9.13.228
ruckuswireless unleashed_firmware 200.4.9.13.47

CWE-78 https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-6224

Vulnerability Summary

References

Vulmon Search

About

Products

Connect