CVE-2017-6224

HIGH

Ruckuswireless Zonedirector Firmware - OS Command Injection

Title source: rule
STIX 2.1

Description

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0121
EPSS Percentile 64.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (19)
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware 200.2.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware 200.3.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware 200.4.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware 200.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware ZD10.0.0.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware ZD10.0.1.x
Brocade Communications Systems, Inc./Zone Director Controller and Unleashed AP Firmware ZD9.x
ruckuswireless/unleashed_firmware 200.1
ruckuswireless/unleashed_firmware 200.1.9.12.55
ruckuswireless/unleashed_firmware 200.3
... and 9 more
Published Oct 13, 2017
Tracked Since Feb 18, 2026