NetSight
IP …
critical9.8

CVE-2019-19836

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp…

Impact

AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.

Affected products

VendorProductAffected versions
RuckuswirelessUnleashed
before 200.7.10.202.94
RuckuswirelessZonedirector 1200 Firmware
before 9.10.2.0.84
from 9.12.0 before 9.12.3.0.136
from 9.13.0 before 10.0.1.0.90
from 10.1.0 before 10.1.2.0.275
from 10.2.0 before 10.2.1.0.147
from 10.3.0 before 10.3.1.0.21

Weakness classification

CWE-20

References