CVE-2017-6224 - CVE House
Back to Database
Status published High CVE-2017-6224

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x...

Vulnerability Description

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6224

Credits & Attribution

No credits recorded in the NVD database.

References

More from Brocade Communications Systems, Inc.

View All →
CVE-2019-16210
Brocade SANnav versions before v2.0, logs plain text database connection...
Medium 5.5
CVE-2019-16209
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions...
High 7.4
CVE-2019-16208
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0,...
High 7.5
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which...
High 7.8
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs...
Medium 5.5

Affected Vendor

Brocade Communications Systems, Inc.

View all reports →

Affected Software

Zone Director Controller and Unleashed AP Firmware
Vulnerable Versions:
ZD9.x, ZD10.0.0.x, ZD10.0.1.x, 200.x, 200.2.x, 200.3.x, 200.4.x

Timeline

Official Publish: October 13th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.