CVE Feed

    Dashboard / CVE / CVE-2017-6229

    CVE-2017-6229

    Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.

    Published:Feb 14, 2018
    Last Modified:Nov 21, 2024
    EPS:Feb 14, 2018
    EPSS Score:0.0529
    CVSS Score:8.8

    Affected Products

    Vendor
    Ruckuswireless
    Product
    H320
    Vendor
    Ruckuswireless
    Product
    H320 Firmware
    Vendor
    Ruckuswireless
    Product
    H510
    Vendor
    Ruckuswireless
    Product
    H510 Firmware
    Vendor
    Ruckuswireless
    Product
    R310
    Vendor
    Ruckuswireless
    Product
    R310 Firmware
    Vendor
    Ruckuswireless
    Product
    R500
    Vendor
    Ruckuswireless
    Product
    R500 Firmware
    Vendor
    Ruckuswireless
    Product
    R510
    Vendor
    Ruckuswireless
    Product
    R510 Firmware
    Vendor
    Ruckuswireless
    Product
    R600
    Vendor
    Ruckuswireless
    Product
    R600 Firmware
    Vendor
    Ruckuswireless
    Product
    R710
    Vendor
    Ruckuswireless
    Product
    R710 Firmware
    Vendor
    Ruckuswireless
    Product
    R720
    Vendor
    Ruckuswireless
    Product
    R720 Firmware
    Vendor
    Ruckuswireless
    Product
    T300
    Vendor
    Ruckuswireless
    Product
    T300 Firmware
    Vendor
    Ruckuswireless
    Product
    T300e
    Vendor
    Ruckuswireless
    Product
    T300e Firmware
    Vendor
    Ruckuswireless
    Product
    T301
    Vendor
    Ruckuswireless
    Product
    T301 Firmware
    Vendor
    Ruckuswireless
    Product
    T610
    Vendor
    Ruckuswireless
    Product
    T610 Firmware
    Vendor
    Ruckuswireless
    Product
    T710
    Vendor
    Ruckuswireless
    Product
    T710 Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200 Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 3000
    Vendor
    Ruckuswireless
    Product
    Zonedirector 3000 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-49225 (CVSS 6.1) — A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP S…
    CVE-2023-25717 (CVSS 9.8) — Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as de…
    CVE-2020-13919 (CVSS 9.8) — emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command i…
    CVE-2020-13918 (CVSS 7.5) — Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker…
    CVE-2020-13917 (CVSS 9.8) — rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection …
    CVE-2020-13916 (CVSS 9.8) — A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker …
    CVE-2020-13915 (CVSS 7.5) — Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attack…
    CVE-2020-13914 (CVSS 7.5) — webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of servic…
    CVE-2020-13913 (CVSS 6.1) — An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute …
    CVE-2019-19839 (CVSS 9.8) — emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High