high8.8
CVE-2017-6229
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13…
Impact
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruckuswireless | R500 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | R600 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | R310 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | H320 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | H510 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | R710 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | R720 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | T300 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | T301 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | T300e Firmware | before 200.6.10.1.0 |
| Ruckuswireless | T610 Firmware | before 200.6.10.1.0 |
| Ruckuswireless | T710 Firmware | before 200.6.10.1.0 |