Vulnerability Intelligence Report
CVE-2019-19839
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:3.28%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ruckuswireless | unleashed | all |
| ruckuswireless | c110 | all |
| ruckuswireless | e510 | all |
| ruckuswireless | h320 | all |
| ruckuswireless | h510 | all |
| ruckuswireless | m510 | all |
| ruckuswireless | r310 | all |
| ruckuswireless | r320 | all |
| ruckuswireless | r510 | all |
| ruckuswireless | r610 | all |
| ruckuswireless | r710 | all |
| ruckuswireless | r720 | all |
| ruckuswireless | t310 | all |
| ruckuswireless | t610 | all |
| ruckuswireless | t710 | all |
| ruckuswireless | zonedirector_1200_firmware | all |
| ruckuswireless | zonedirector_1200 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.282%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2019-12-17T00:00:00 |
| Published | 2020-01-23T13:42:32 |
| Last Updated | 2024-08-05T02:25:12 |
Community Chatter & Buzz