CVE-2017-6229
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.27% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- ruckuswireless/r500 firmware · ruckuswireless/r600 firmware · ruckuswireless/r310 firmware · ruckuswireless/h320 firmware · ruckuswireless/h510 firmware · ruckuswireless/r710 firmware · ruckuswireless/r720 firmware · ruckuswireless/t300 firmware · ruckuswireless/t301 firmware · ruckuswireless/t300e firmware · ruckuswireless/t610 firmware · ruckuswireless/t710 firmware · ruckuswireless/r510 firmware · ruckuswireless/zonedirector 1200 firmware · ruckuswireless/zonedirector 3000 firmware
- Source
- sirt@brocade.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.