Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruckus ZoneFlex R500 操作系统命令注入漏洞
Vulnerability Description
Ruckus ZoneFlex R500 104.0.0.0.1347版本中隐藏的/forms/nslookupHandler表单存在操作系统命令注入漏洞。攻击者可借助特制请求利用该漏洞在系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A