Vulnerabilities > Ruckuswireless > Unleashed > High

DATE CVE VULNERABILITY TITLE RISK
2020-01-23 CVE-2019-19835 Server-Side Request Forgery (SSRF) vulnerability in Ruckuswireless Unleashed and Zonedirector 1200 Firmware
SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.
network
low complexity
ruckuswireless CWE-918
7.5
2020-01-22 CVE-2019-19834 Path Traversal vulnerability in Ruckuswireless Unleashed and Zonedirector 1200 Firmware
Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.
network
low complexity
ruckuswireless CWE-22
7.2