RCE in Brocade Communications Systems, Inc. Ruckus Networks Unleashed Aps And Zone Director
CVE-2017-6229
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.023 (82.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.023 · newest: 0.023 · change: 0.000
Affected products
- Brocade Communications Systems, Inc. Ruckus Networks Unleashed Aps And Zone Director — versions Unleashed AP firmware releases before 200.6.10.1.x and ZD firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x,9.13.3.0.x, 10.0.1.0.x or before
- Ruckuswireless H320
- Ruckuswireless H320 Firmware
- Ruckuswireless H510
- Ruckuswireless H510 Firmware
- Ruckuswireless R310
- Ruckuswireless R310 Firmware
- Ruckuswireless R500
- Ruckuswireless R500 Firmware
- Ruckuswireless R510
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2017-6229?
- CVE-2017-6229 is a high-severity vulnerability in Brocade Communications Systems, Inc. Ruckus Networks Unleashed Aps And Zone Director, classified under OS Command Injection. CVSS score: 8.8/10. Published 2018-02-14.
- How severe is CVE-2017-6229?
- High severity. CVSS v3 base score is 8.8 out of 10.