Ruckuswireless vulnerabilities1 known to be exploited.
Ruckuswireless has 37 published vulnerabilities across 138 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is R310, with 31. If you run Ruckuswireless software, patch the exploited flaws first.
The most recent Ruckuswireless flaw added to the known-exploited list is CVE-2023-25717, on 12 May 2023. We keep watching the known-exploited list.
Which Ruckuswireless products have the most vulnerabilities?
R310 leads with 31 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Ruckuswireless vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component.
Which Ruckuswireless flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 98%
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
- 24%CVE-2019-19838Critical
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.
- 5.0%CVE-2019-19842Critical
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac attribute.
- 4.1%CVE-2019-19840Critical
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.
- 3.6%CVE-2020-13916Critical
A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request.
- 3.6%CVE-2019-19836Critical
AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rcmdstat.jsp to write to a specified filename.
- 3.3%CVE-2019-19841Critical
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac attribute.
- 3.3%CVE-2019-19839Critical
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploadFile attribute.
- 2.5%CVE-2020-13919Critical
emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP request.
- 2.4%CVE-2020-13918High
Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be used for a jailbreak) via an unauthenticated crafted HTTP request.
All Ruckuswireless products we track.
32 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Zonedirector 1200 Firmwarezonedirector_1200_firmware21 vulnerabilities21 versions
- R310 Firmwarer310_firmware13 vulnerabilities3 versions
- Sz-100 Firmwaresz-100_firmware12 vulnerabilities4 versions
- Sz-300 Firmwaresz-300_firmware12 vulnerabilities4 versions
- Vsz Firmwarevsz_firmware12 vulnerabilities4 versions
- R500 Firmwarer500_firmware11 vulnerabilities2 versions
- R600 Firmwarer600_firmware11 vulnerabilities2 versions
- T300 Firmwaret300_firmware11 vulnerabilities2 versions
- Unleashedunleashed11 vulnerabilities1 version
- Zonedirector 3000 Firmwarezonedirector_3000_firmware11 vulnerabilities10 versions
- T301n Firmwaret301n_firmware10 vulnerabilities1 version
- T301s Firmwaret301s_firmware10 vulnerabilities1 version
- Zonedirector 1100 Firmwarezonedirector_1100_firmware10 vulnerabilities1 version
- Zonedirector 5000 Firmwarezonedirector_5000_firmware10 vulnerabilities1 version
- Unleashed Firmwareunleashed_firmware8 vulnerabilities7 versions
- Zonedirector Firmwarezonedirector_firmware3 vulnerabilities7 versions
- H320 Firmwareh320_firmware2 vulnerabilities1 version
- H510 Firmwareh510_firmware2 vulnerabilities1 version
- R510 Firmwarer510_firmware2 vulnerabilities1 version
- R710 Firmwarer710_firmware2 vulnerabilities1 version
- R720 Firmwarer720_firmware2 vulnerabilities1 version
- Smartzonesmartzone2 vulnerabilities3 versions
- T610 Firmwaret610_firmware2 vulnerabilities1 version
- T710 Firmwaret710_firmware2 vulnerabilities1 version
This directory lists the 32 Ruckuswireless products with at least one tracked version, of 138 in our catalogue.
Running Ruckuswireless? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.
- Matched to
- Ruckus Wireless Admin on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 37 published vulnerabilities across 138 products and 95 versions from Ruckuswireless. The most recent Ruckuswireless flaw added to the known-exploited list is CVE-2023-25717, on 12 May 2023.
1 Ruckuswireless vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2023-25717. The full list is on this page.
R310, with 31 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Ruckuswireless products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.