CVE-2020-26878

Published: 2020-10-26T20:15Z

Last Modified: 2024-11-21T05:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt