CVE-2019-19834: Path Traversal
Published Jan 22, 2020
·Updated
Directory Traversal in ruckuscli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with ../../../bin/sh as the parameter.
Affected Software
22 affected components
Ruckuswireless Unleashed<200.7.10.202.94
Ruckuswireless C110
Ruckuswireless E510
Ruckuswireless H320
Ruckuswireless H510
Ruckuswireless M510
Ruckuswireless R310
Ruckuswireless R320
Ruckuswireless R510
Ruckuswireless R610
Ruckuswireless R710
Ruckuswireless R720
Ruckuswireless T310
Ruckuswireless T610
Ruckuswireless T710
Ruckuswireless Zonedirector 1200 Firmware<9.10.2.0.84
Ruckuswireless Zonedirector 1200 Firmware>=9.12.0<9.12.3.0.136
Ruckuswireless Zonedirector 1200 Firmware>=9.13.0<10.0.1.0.90
Ruckuswireless Zonedirector 1200 Firmware>=10.1.0<10.1.2.0.275
Ruckuswireless Zonedirector 1200 Firmware>=10.2.0<10.2.1.0.147
Ruckuswireless Zonedirector 1200 Firmware>=10.3.0<10.3.1.0.21
Ruckuswireless Zonedirector 1200
Event History
Jan 22, 2020
CVE Published
via MITRE·06:09 PM
Data Sourced
via MITRE·06:09 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19834?
CVE-2019-19834 is classified as a high-severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2019-19834?
To mitigate CVE-2019-19834, update Ruckus Wireless Unleashed to version 200.7.10.202.94 or later.
3
What systems are affected by CVE-2019-19834?
CVE-2019-19834 specifically affects Ruckus Wireless Unleashed up to version 200.7.10.202.94.
4
Can CVE-2019-19834 be exploited remotely?
Yes, CVE-2019-19834 can be exploited by remote attackers using directory traversal techniques.
5
What are the implications of exploiting CVE-2019-19834?
Exploitation of CVE-2019-19834 can lead to unauthorized access and control of the system's command line interface.