{"id":"CVE-2017-6229","aliases":["EUVD-2017-15290","GHSA-g8q7-j99f-7v7m"],"status":"published","title":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone...","description":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02268,"percentile":0.83147,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2018-02-14T19:00:00Z","modified":"2026-06-17T01:21:59Z","products":[{"vendor":"brocade communications systems, inc.","product":"ruckus networks unleashed aps and zone director"},{"vendor":"ruckuswireless","product":"h320_firmware"},{"vendor":"ruckuswireless","product":"h510_firmware"},{"vendor":"ruckuswireless","product":"r310_firmware"},{"vendor":"ruckuswireless","product":"r500_firmware"},{"vendor":"ruckuswireless","product":"r510_firmware"},{"vendor":"ruckuswireless","product":"r600_firmware"},{"vendor":"ruckuswireless","product":"r710_firmware"},{"vendor":"ruckuswireless","product":"r720_firmware"},{"vendor":"ruckuswireless","product":"t300_firmware"},{"vendor":"ruckuswireless","product":"t300e_firmware"},{"vendor":"ruckuswireless","product":"t301_firmware"},{"vendor":"ruckuswireless","product":"t610_firmware"},{"vendor":"ruckuswireless","product":"t710_firmware"},{"vendor":"ruckuswireless","product":"zonedirector_1200_firmware"},{"vendor":"ruckuswireless","product":"zonedirector_3000_firmware"}],"references":[{"url":"https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-20180202-v1.0.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6229"},{"url":"https://github.com/advisories/GHSA-g8q7-j99f-7v7m"}],"sources":{"cve":[{"id":"CVE-2017-6229","description":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.","status":"published","published":"2018-02-14T19:00:00Z","modified":"2024-09-16T23:55:41.5Z","updated_at":"2026-11-02T14:33:16.916541Z"}],"euvd":[{"id":"EUVD-2017-15290","description":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.","status":"published","published":"2018-02-14T19:00:00Z","modified":"2024-09-16T23:55:41Z","updated_at":"2026-11-03T00:29:03.911526Z"}],"ghsa":[{"id":"GHSA-g8q7-j99f-7v7m","title":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone...","description":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.","status":"published","published":"2022-05-14T03:38:48Z","modified":"2023-02-02T05:09:53Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:52:45.777625Z"}],"nvd":[{"id":"CVE-2017-6229","description":"Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.","status":"published","published":"2018-02-14T19:29:00.213Z","modified":"2026-06-17T01:21:59.57Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:15.877386Z"}]}}