Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access certain configuration/ and maintenance/ scripts, by constructing a crafted URI after receiving an authentication error for an arbitrary login attempt.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-264,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ruckuswireless | zoneflex_2942__firmware | 9.6.0.0.267 |
| ruckuswireless | zoneflex_2942 | - |
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-78,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ruckuswireless | unleashed_firmware | 200.4.9.13 |
| ruckuswireless | zonedirector_firmware | zd9.9.0.0.216 |
| ruckuswireless | zonedirector_firmware | zd9.13.0.0.103 |
| ruckuswireless | unleashed_firmware | 200.3.9.13.228 |
| ruckuswireless | zonedirector_firmware | zd9.13.0.0.209 |
| ruckuswireless | zonedirector_firmware | zd9.9.0.0.212 |
| ruckuswireless | unleashed_firmware | 200.1.9.12.55 |
| ruckuswireless | zonedirector_firmware | zd9.9.0.0.205 |
| ruckuswireless | unleashed_firmware | 200.3 |
| ruckuswireless | unleashed_firmware | 200.4.9.13.47 |
| ruckuswireless | unleashed_firmware | 200.1 |
| ruckuswireless | zonedirector_firmware | zd9.10.0.0.218 |
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-78,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ruckuswireless | zonedirector_3000_firmware | * |
| ruckuswireless | r710_firmware | * |
| ruckuswireless | t710_firmware | * |
| ruckuswireless | r500_firmware | * |
| ruckuswireless | zonedirector_3000_firmware | 10.1.0.0.1515 |
| ruckuswireless | r310_firmware | * |
| ruckuswireless | h510_firmware | * |
| ruckuswireless | zonedirector_1200_firmware | * |
| ruckuswireless | r720_firmware | * |
| ruckuswireless | r510_firmware | * |
| ruckuswireless | t300_firmware | * |
| ruckuswireless | t301_firmware | * |
| ruckuswireless | t300e_firmware | * |
| ruckuswireless | zonedirector_1200_firmware | 10.1.0.0.1515 |
| ruckuswireless | h320_firmware | * |
| ruckuswireless | t610_firmware | * |
| ruckuswireless | r600_firmware | * |
Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-78,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ruckuswireless | solo_access_point_firmware | * |
| ruckuswireless | smartzone_managed_access_point_firmware | * |
Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain sensitive information or modify data.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-200,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ruckuswireless | sz-300_firmware | 3.6.0 |
| ruckuswireless | scg-200_firmware | 3.6.0 |
| ruckuswireless | sz-300_firmware | 3.6.1 |
| ruckuswireless | scg-200_firmware | 3.6.1 |
| ruckuswireless | vsz_firmware | 3.6.0 |
| ruckuswireless | sz-100_firmware | 3.6.1 |
| ruckuswireless | sz-100_firmware | 3.5.0 |
| ruckuswireless | sz-100_firmware | 3.6.0 |
| ruckuswireless | sz-300_firmware | 3.5.1 |
| ruckuswireless | sz-100_firmware | 3.5.1 |
| ruckuswireless | scg-200_firmware | 3.5.1 |
| ruckuswireless | scg-200_firmware | 3.5.0 |
| ruckuswireless | vsz_firmware | 3.6.1 |
| ruckuswireless | vsz_firmware | 3.5.1 |
| ruckuswireless | sz-300_firmware | 3.5.0 |
| ruckuswireless | vsz_firmware | 3.5.0 |