CVE Feed

    Dashboard / CVE / CVE-2019-19842

    CVE-2019-19842

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.

    Published:Jan 22, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 22, 2020
    EPSS Score:0.06696
    CVSS Score:9.8

    Affected Products

    Vendor
    Ruckuswireless
    Product
    C110
    Vendor
    Ruckuswireless
    Product
    E510
    Vendor
    Ruckuswireless
    Product
    H320
    Vendor
    Ruckuswireless
    Product
    H510
    Vendor
    Ruckuswireless
    Product
    M510
    Vendor
    Ruckuswireless
    Product
    R310
    Vendor
    Ruckuswireless
    Product
    R320
    Vendor
    Ruckuswireless
    Product
    R510
    Vendor
    Ruckuswireless
    Product
    R610
    Vendor
    Ruckuswireless
    Product
    R710
    Vendor
    Ruckuswireless
    Product
    R720
    Vendor
    Ruckuswireless
    Product
    T310
    Vendor
    Ruckuswireless
    Product
    T610
    Vendor
    Ruckuswireless
    Product
    T710
    Vendor
    Ruckuswireless
    Product
    Unleashed
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200 Firmware

    Exploits

    https://alephsecurity.com/2020/01/14/ruckus-wirelesshttps://alephsecurity.com/2020/01/14/ruckus-wirelesshttps://github.com/bdunlap9/CVE-2019-19842

    Related CVEs

    CVE-2023-49225 (CVSS 6.1) — A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP S…
    CVE-2020-13919 (CVSS 9.8) — emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command i…
    CVE-2020-13918 (CVSS 7.5) — Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker…
    CVE-2020-13917 (CVSS 9.8) — rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection …
    CVE-2020-13916 (CVSS 9.8) — A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker …
    CVE-2020-13915 (CVSS 7.5) — Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attack…
    CVE-2020-13914 (CVSS 7.5) — webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of servic…
    CVE-2020-13913 (CVSS 6.1) — An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute …
    CVE-2019-19839 (CVSS 9.8) — emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a…
    CVE-2019-19838 (CVSS 9.8) — emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High