CVE-2017-6230

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-14 · updated 2026-06-17
Weakness: CWE-78

Description

Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.

Affected products

Ruckuswireless Smartzone Managed Access Point Firmware: through r5.0
Ruckuswireless Solo Access Point Firmware: through r110.0

References

https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt
https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt

Get alerted when CVE-2017-6230 or the next vulnerability affects your stack