UN
Product
Unleashed
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 2Medium 1Low 0
Watch
Add Unleashed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-19839 | 9.8 | Jan 23 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to… Affected: before 200.7.10.202.94 |
| CVE-2019-19838 | 9.8 | Jan 23 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to… Affected: before 200.7.10.202.94 |
| CVE-2019-19842 | 9.8 | Jan 22 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to… Affected: before 200.7.10.202.94 |
| CVE-2019-19841 | 9.8 | Jan 22 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to… Affected: before 200.7.10.202.94 |
| CVE-2019-19840 | 9.8 | Jan 22 | A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request Affected: before 200.7.10.202.94 |
| CVE-2019-19843 | 9.8 | Jan 22 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a… Affected: before 200.7.10.202.94 |
| CVE-2019-19836 | 9.8 | Jan 22 | AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a… Affected: before 200.7.10.202.94 |
Showing 7