Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ruckus Unleashed Authenticated RCE in Gateway Mode
Vulnerability Description
Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Ruckus Wireless多款产品 操作系统命令注入漏洞
Vulnerability Description
Ruckus Wireless Ruckus CloudPath是一种网络访问控制（NAC）解决方案，用于管理网络用户的身份和访问权限，特别是在Wi-Fi网络中。它的目标是提供高级的网络访问管理和安全性功能，确保用户可以安全地连接到网络，并且网络资源受到保护。 Ruckus Wireless多款产品存在操作系统命令注入漏洞，该漏洞源于基于Web的管理接口存在远程代码执行漏洞，可能导致在启用网关模式时，经过身份验证的远程攻击者在系统上执行任意代码。以下产品受到影响：RUCKUS H350、RUCKUS H5
CVSS Information
N/A
Vulnerability Type
N/A