CVE-2017-6224: OS Command Injection
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6224?
CVE-2017-6224 has a high severity level due to its potential for OS command injection, allowing unauthorized remote access.
How do I fix CVE-2017-6224?
To resolve CVE-2017-6224, upgrade to the recommended firmware versions provided by Ruckus Wireless.
Which versions are affected by CVE-2017-6224?
CVE-2017-6224 affects Ruckus Wireless Zone Director Controller firmware versions ZD9.x, ZD10.0.0.x, ZD10.0.1.x below 10.0.1.0.17, and Unleashed AP Firmware versions 200.0.x to 200.4.x.
What are the risks of CVE-2017-6224?
Exploiting CVE-2017-6224 can allow attackers to execute arbitrary commands on the affected devices, compromising their integrity.
Is there a workaround for CVE-2017-6224?
There is no effective workaround for CVE-2017-6224, and upgrading the firmware is the recommended action.