NetSight
IP …
critical9.8

CVE-2019-19840

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated…

Impact

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

Affected products

VendorProductAffected versions
RuckuswirelessUnleashed
before 200.7.10.202.94
RuckuswirelessZonedirector 1200 Firmware
before 9.10.2.0.84
from 9.12.0 before 9.12.3.0.136
from 9.13.0 before 10.0.1.0.90
from 10.1.0 before 10.1.2.0.275
from 10.2.0 before 10.2.1.0.147
from 10.3.0 before 10.3.1.0.21

Weakness classification

CWE-787

References