CVE-2017-6230: brocade communications systems, inc. ruckus networks solo aps and sz managed aps OS Command Injection
Vulnerability summary
CVE-2017-6230 is a high (CVSS 9.0) OS Command Injection vulnerability in brocade communications systems, inc. ruckus networks solo aps and sz managed aps. EPSS estimates a 2.27% chance of exploitation in the next 30 days, higher than 82.8% of scored vulnerabilities.
Timeline
- 14-02-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.27%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.27% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ruckuswireless2 products
Brocade communications systems, inc.1 product
- ruckus networks solo aps and sz managed apsSolo AP firmware releases R110.x or before and SZ managed APs firmware release R5.x or before
2 vendors · 3 products
References
1 links- ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txtX Refsource CONFIRMMitigationVendor Advisory