What’s Vulnerable › Vulnerabilities

CVE-2017-6229

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-14 · updated 2026-06-17
• Weakness: CWE-78

Description

Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.

Affected products

• Ruckuswireless H320 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless H510 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R310 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R500 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R510 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R600 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R710 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless R720 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless T300 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless T300E Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless T301 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless T610 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless T710 Firmware: before 200.6.10.1.0 — fixed in 200.6.10.1.0
• Ruckuswireless Zonedirector 1200 Firmware: from 9.10.2.0.11 through 9.10.2.0.53; from 9.12.3.0.28 through 9.12.3.0.83; from 9.13.3.0.22 through 9.13.3.0.145; from 10.0.1.0.17 through 10.0.1.0.44; 10.1.0.0.1515
• Ruckuswireless Zonedirector 3000 Firmware: from 9.10.2.0.11 through 9.10.2.0.53; from 9.12.3.0.28 through 9.12.3.0.83; from 9.13.3.0.22 through 9.13.3.0.145; from 10.0.1.0.17 through 10.0.1.0.44; 10.1.0.0.1515

How to fix

Upgrade to a fixed version: Ruckuswireless H320 Firmware 200.6.10.1.0; Ruckuswireless H510 Firmware 200.6.10.1.0; Ruckuswireless R310 Firmware 200.6.10.1.0; Ruckuswireless R500 Firmware 200.6.10.1.0; Ruckuswireless R510 Firmware 200.6.10.1.0; Ruckuswireless R600 Firmware 200.6.10.1.0; Ruckuswireless R710 Firmware 200.6.10.1.0; Ruckuswireless R720 Firmware 200.6.10.1.0; Ruckuswireless T300 Firmware 200.6.10.1.0; Ruckuswireless T300E Firmware 200.6.10.1.0; Ruckuswireless T301 Firmware 200.6.10.1.0; Ruckuswireless T610 Firmware 200.6.10.1.0. Check the vendor advisory for mitigations.

References

• https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt
• https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt

Get alerted when CVE-2017-6229 or the next vulnerability affects your stack