CVE-2021-33217: Critical severity commscope ruckus iot controller vulnerability
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web Application allows Arbitrary Read/Write actions by authenticated users. The API allows an HTTP POST of arbitrary content into any file on the filesystem as root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-33217?
The severity of CVE-2021-33217 is critical with a CVSS score of 8.8.
What is the affected software for CVE-2021-33217?
The affected software for CVE-2021-33217 is CommScope Ruckus IoT Controller version 1.7.1.0 and earlier.
What action can authenticated users perform in the Web Application of CVE-2021-33217?
Authenticated users can perform Arbitrary Read/Write actions in the Web Application of CVE-2021-33217.
What can be done with the API of CVE-2021-33217?
The API of CVE-2021-33217 allows an HTTP POST of arbitrary content into any file on the filesystem as root.
Are there any references for CVE-2021-33217?
Yes, you can find references for CVE-2021-33217 at the following links: [http://seclists.org/fulldisclosure/2021/May/77](http://seclists.org/fulldisclosure/2021/May/77) and [https://korelogic.com/advisories.html](https://korelogic.com/advisories.html).