CVE-2020-13917

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.92

Description The issue allows a remote attacker to achieve command injection and jailbreak the CLI via a crafted CLI command, affecting various Ruckus Wireless devices including C110, E510, H320, H510, M510, R320, R310, R500, R510, R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s.

Recommendations For versions through 200.7.10.92, consider restricting access to the rkscli to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using crafted CLI commands that could lead to command injection.