In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
| Software | From | Fixed in |
|---|---|---|
| commscope / ruckus_smartzone_firmware | - | 6.1.2 |
| commscope / ruckus_smartzone_firmware | 6.1.2 | 6.1.2.x |
| commscope / ruckus_smartzone_firmware | 6.1.2-p2 | 6.1.2-p2.x |
| commscope / ruckus_smartzone_firmware | 6.1.2-p3 | 6.1.2-p3.x |
| commscope / ruckus_smartzone_firmware | 7.0.0 | 7.0.0.x |
| commscope / ruckus_smartzone_firmware | 7.1.0 | 7.1.0.x |
| commscope / ruckus_network_director | - | 4.5.0.51 |