CVE-2017-6229
High
Description
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.
SeverityHigh
CVSS8.8
Exploit probability—
ProductRuckuswireless R500 Firmware
PublishedFeb 14, 2018
First seenFeb 14, 2018
How to fix
Update
- ruckuswireless r500_firmware200.6.10.1.0 or later
- ruckuswireless r600_firmware200.6.10.1.0 or later
- ruckuswireless r310_firmware200.6.10.1.0 or later
- ruckuswireless h320_firmware200.6.10.1.0 or later
- ruckuswireless h510_firmware200.6.10.1.0 or later
- ruckuswireless r710_firmware200.6.10.1.0 or later
- ruckuswireless r720_firmware200.6.10.1.0 or later
- ruckuswireless t300_firmware200.6.10.1.0 or later
- ruckuswireless t301_firmware200.6.10.1.0 or later
- ruckuswireless t300e_firmware200.6.10.1.0 or later
- ruckuswireless t610_firmware200.6.10.1.0 or later
- ruckuswireless t710_firmware200.6.10.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruckuswireless r500_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless r600_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless r310_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless h320_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless h510_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless r710_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless r720_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless t300_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless t301_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless t300e_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless t610_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless t710_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless r510_firmware | v < 200.6.10.1.0 | 200.6.10.1.0 |
| ruckuswireless zonedirector_1200_firmware | 9.10.2.0.11 ≤ v ≤ 9.10.2.0.53, 9.12.3.0.28 ≤ v ≤ 9.12.3.0.83, 9.13.3.0.22 ≤ v ≤ 9.13.3.0.145, 10.0.1.0.17 ≤ v ≤ 10.0.1.0.44, 10.1.0.0.1515 | — |
| ruckuswireless zonedirector_3000_firmware | 9.10.2.0.11 ≤ v ≤ 9.10.2.0.53, 9.12.3.0.28 ≤ v ≤ 9.12.3.0.83, 9.13.3.0.22 ≤ v ≤ 9.13.3.0.145, 10.0.1.0.17 ≤ v ≤ 10.0.1.0.44, 10.1.0.0.1515 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.