CVE-2019-19840: Buffer Overflow
Published Jan 22, 2020
·Updated
A stack-based buffer overflow in zapparseargs in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.
Affected Software
22 affected components
Ruckuswireless Unleashed<200.7.10.202.94
Ruckuswireless C110
Ruckuswireless E510
Ruckuswireless H320
Ruckuswireless H510
Ruckuswireless M510
Ruckuswireless R310
Ruckuswireless R320
Ruckuswireless R510
Ruckuswireless R610
Ruckuswireless R710
Ruckuswireless R720
Ruckuswireless T310
Ruckuswireless T610
Ruckuswireless T710
Ruckuswireless Zonedirector 1200 Firmware<9.10.2.0.84
Ruckuswireless Zonedirector 1200 Firmware>=9.12.0<9.12.3.0.136
Ruckuswireless Zonedirector 1200 Firmware>=9.13.0<10.0.1.0.90
Ruckuswireless Zonedirector 1200 Firmware>=10.1.0<10.1.2.0.275
Ruckuswireless Zonedirector 1200 Firmware>=10.2.0<10.2.1.0.147
Ruckuswireless Zonedirector 1200 Firmware>=10.3.0<10.3.1.0.21
Ruckuswireless Zonedirector 1200
Event History
Jan 22, 2020
CVE Published
via MITRE·08:32 PM
Data Sourced
via MITRE·08:32 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19840?
CVE-2019-19840 is rated as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2019-19840?
To fix CVE-2019-19840, upgrade your Ruckus Unleashed software to version 200.7.10.202.94 or later.
3
Which Ruckus products are affected by CVE-2019-19840?
CVE-2019-19840 affects Ruckus Unleashed versions up to 200.7.10.202.94 and specific versions of ZoneDirector 1200 firmware.
4
Can CVE-2019-19840 be exploited remotely?
Yes, CVE-2019-19840 can be exploited remotely through unauthenticated HTTP requests.
5
Is CVE-2019-19840 a known vulnerability in Ruckus Wireless devices?
Yes, CVE-2019-19840 is a documented and known vulnerability affecting Ruckus Wireless devices.