CVE-2017-6223

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-13 · updated 2026-06-17
Weakness: CWE-78

Description

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.

Affected products

Brocade Communications Systems, Inc. Zone Director Controller Firmware: zd9.9.0.0.205, zd9.9.0.0.212, zd9.9.0.0.216, zd9.10.0.0.218, zd9.13.0.0.103, zd9.13.0.0.209

References

https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt
https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt

Get alerted when CVE-2017-6223 or the next vulnerability affects your stack