NetSight
IP …
high7.2

CVE-2019-19834

Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script…

Impact

Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.

Affected products

VendorProductAffected versions
RuckuswirelessUnleashed
before 200.7.10.202.94
RuckuswirelessZonedirector 1200 Firmware
before 9.10.2.0.84
from 9.12.0 before 9.12.3.0.136
from 9.13.0 before 10.0.1.0.90
from 10.1.0 before 10.1.2.0.275
from 10.2.0 before 10.2.1.0.147
from 10.3.0 before 10.3.1.0.21

Weakness classification

CWE-22

References