| Package | Affected versions | Patched versions |
|---|---|---|
| ruckus unleashed | ≥ 200.17, < 200.17.7.0.139< 200.15.6.212.14 | 200.17.7.0.139200.15.6.212.14 |
| ruckus zonedirector | < 10.5.1.0.279 | 10.5.1.0.279 |
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-coded credentials for the ftpuser account provide FTP access to the controller, enabling a remote attacker to upload or retrieve arbitrary files from writable firmware directories and thereby expose sensitive information or compromise the controller.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free