Description
Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring.
Unscored
CVE-2020-8438
EUVD-2020-29305GHSA-prw9-cg53-q98p
Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookup…
Published Jan 29, 2020 · Updated Aug 4, 2024 · Assigned by mitre