description: Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.
problem types: Authenticated command injection in WebUI interface of Solo and managed AP via tftp upgrade option.
affected:
{
product: Ruckus Networks Solo APs and SZ managed APs
vendor: Brocade Communications Systems, Inc.
versions:
status: affected, version: Solo AP firmware releases R110.x or before and SZ managed APs firmware release R5.x or before
}