Ruckuswireless Unleashed vulnerabilities

CVE-2019-19838 [CRITICAL] CWE-78 CVE-2019-19838: emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS comm emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.

CVE-2019-19840 [CRITICAL] CWE-787 CVE-2019-19840: A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10 A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

CVE-2019-19842 [CRITICAL] CWE-78 CVE-2019-19842: emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS comm emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.

CVE-2019-19836 [CRITICAL] CWE-20 CVE-2019-19836: AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.

CVE-2019-19841 [CRITICAL] CWE-78 CVE-2019-19841: emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS comm emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.

CVE-2019-19839 [CRITICAL] CWE-78 CVE-2019-19839: emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS comm emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.

CVE-2019-19843 [CRITICAL] CWE-522 CVE-2019-19843: Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 a Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.

CVE-2019-19834 [HIGH] CWE-22 CVE-2019-19834: Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a rem Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.

CVE-2019-19835 [HIGH] CWE-918 CVE-2019-19835: SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a r SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.

CVE-2019-19837 [MEDIUM] CVE-2019-19837: Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 a Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.