CVE-2020-26878

Опубликовано: 26 окт. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Средний

Описание

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.

Ссылки

https://adepts.of0x.cc
Third Party Advisory
https://adepts.of0x.cc/ruckus-vriot-rce/
Exploit
Third Party Advisory
https://support.ruckuswireless.com/documents
Vendor Advisory
https://support.ruckuswireless.com/security_bulletins/305
Product
Vendor Advisory
https://twitter.com/TheXC3LL
Third Party Advisory
https://x-c3ll.github.io
Third Party Advisory
https://adepts.of0x.cc
Third Party Advisory
https://adepts.of0x.cc/ruckus-vriot-rce/
Exploit
Third Party Advisory
https://support.ruckuswireless.com/documents
Vendor Advisory
https://support.ruckuswireless.com/security_bulletins/305
Product
Vendor Advisory
https://twitter.com/TheXC3LL
Third Party Advisory
https://x-c3ll.github.io
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:commscope:ruckus_vriot:*:*:*:*:*:*:*:*

Версия до 1.5.1.0.21 (включая)

cpe:2.3:h:commscope:ruckus_iot_module:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.41549

Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-9h25-7cgq-fhvv

github

больше 3 лет назад