Ruckuswireless vulnerabilities, page 3

46 vulnerabilities

Known vulnerabilities in Ruckuswireless products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 63 products.

10CVE-2019-19839ruckuswirelessunleashed+1
EPSS score
3.28%
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.9.8CVE-2019-19840ruckuswirelessunleashed+1
EPSS score
4.13%
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.10CVE-2019-19838ruckuswirelessunleashed+1
EPSS score
24.36%
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.7.2CVE-2019-19834ruckuswirelessunleashed+1
EPSS score
2.21%
Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.9.8CVE-2023-25717commscoperuckus_smartzone_firmware+2KEV
EPSS score
98.07%
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.6.1CVE-2023-49225commscope, inc.ap solo c110+73
EPSS score
0.41%
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.