漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cmdstat.jsp` passes attacker-controlled input to the shell without adequate validation, enabling a remote attacker to specify a target by MAC address and execute arbitrary commands as root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CommScope Ruckus Unleashed 安全漏洞
Vulnerability Description
CommScope Ruckus Unleashed是美国CommScope公司的一款无线路由器。 CommScope Ruckus Unleashed 200.15.6.212.14和200.17.7.0.139之前版本存在安全漏洞,该漏洞源于诊断API端点输入验证不足,可能导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A