Описание
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command `!v54!` via a management API call and then invoke it to escape the restricted shell and obtain a root shell on the controller.
Затрагиваемое ПО
Ruckuswireless Ruckus unleashedRuckuswireless Ruckus zonedirectorCommscope Ruckus c110Commscope Ruckus e510Commscope Ruckus h320Commscope Ruckus h350Commscope Ruckus h510Commscope Ruckus h550Commscope Ruckus m510Commscope Ruckus m510-jpCommscope Ruckus r310Commscope Ruckus r320Commscope Ruckus r350Commscope Ruckus r350eCommscope Ruckus r510Commscope Ruckus r550Commscope Ruckus r560Commscope Ruckus r610Commscope Ruckus r650Commscope Ruckus r670Commscope Ruckus r710Commscope Ruckus r720Commscope Ruckus r730Commscope Ruckus r750Commscope Ruckus r760
CVSS
| Балл | 8.8 — высокая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://sector7.computest.nl/post/2025-07-ruckus-unleashed/https://support.ruckuswireless.com/security_bulletins/330