CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: ruckus networks unleashed ap firmware releases before 200.6.10.1.x and ruckus networks zone director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated root command injection in the cli that could allow authenticated valid users to execute privileged commands on the respective systems.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-02-14
Last Modified Date: 2018-03-12