Z1
Product
Zonedirector 1200 Firmware
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 8Medium 2Low 0
Watch
Add Zonedirector 1200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-22654 | 9.8 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22658 | 9.8 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22653 | 9.8 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2019-19839 | 9.8 | Jan 23 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19838 | 9.8 | Jan 23 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19840 | 9.8 | Jan 22 | A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19842 | 9.8 | Jan 22 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19841 | 9.8 | Jan 22 | emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19843 | 9.8 | Jan 22 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19836 | 9.8 | Jan 22 | AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2020-22657 | 9.1 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2017-6229 | 8.8 | Feb 14 | Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x… Affected: 9.10.2.0.11 through 9.10.2.0.53; 9.12.3.0.28 through 9.12.3.0.83; 9.13.3.0.22 through 9.13.3.0.145; 10.0.1.0.17 through 10.0.1.0.44; 10.1.0.0.1515 |
| CVE-2020-22660 | 7.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22655 | 7.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22656 | 7.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22662 | 7.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2020-22659 | 7.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2019-19835 | 7.5 | Jan 23 | SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2019-19834 | 7.2 | Jan 22 | Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with… Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
| CVE-2020-22661 | 6.5 | Jan 20 | In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway… Affected: 10.2.1.0.218 |
| CVE-2019-19837 | 5.3 | Jan 23 | Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests Affected: before 9.10.2.0.84; 9.12.0 before 9.12.3.0.136; 9.13.0 before 10.0.1.0.90; 10.1.0 before 10.1.2.0.275; 10.2.0 before 10.2.1.0.147; 10.3.0 before 10.3.1.0.21 |
Showing 21