Unleashed

unleashed

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-19839 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 23, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.
CVE-2019-19838 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 23, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.
CVE-2019-19837 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 23, 2020 N/A· v4 5.3 MEDIUM· v3 7.8 HIGH· v2 Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.
CVE-2019-19835 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 23, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.
CVE-2019-19842 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.
CVE-2019-19841 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.
CVE-2019-19840 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.
CVE-2019-19843 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_ca...Show more Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.Show less
CVE-2019-19836 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.
CVE-2019-19834 1Ruckuswireless 2Unleashed Zonedirector 1200 Firmware Jun 17, 2026 Jan 22, 2020 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.