Login Request a demo
UN
Product
Unleashed
by Ruckuswireless · last CVE Jan 23, 2020
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 7High 2Medium 1Low 0
Severity
All severities10Critical7High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Unleashed to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19839
9.8
3%
Jan 23
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to…
Affected: before 200.7.10.202.94
CVE-2019-19838
9.8
24%
Jan 23
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to…
Affected: before 200.7.10.202.94
CVE-2019-19842
9.8
5%
Jan 22
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to…
Affected: before 200.7.10.202.94
CVE-2019-19841
9.8
3%
Jan 22
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to…
Affected: before 200.7.10.202.94
CVE-2019-19840
9.8
4%
Jan 22
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request
Affected: before 200.7.10.202.94
CVE-2019-19843
9.8
2%
Jan 22
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a…
Affected: before 200.7.10.202.94
CVE-2019-19836
9.8
4%
Jan 22
AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a…
Affected: before 200.7.10.202.94
CVE-2019-19835
7.5
2%
Jan 23
SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI
Affected: before 200.7.10.202.94
CVE-2019-19834
7.2
2%
Jan 22
Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with…
Affected: before 200.7.10.202.94
CVE-2019-19837
5.3
2%
Jan 23
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests
Affected: before 200.7.10.202.94
Showing 10