← Vulnerability feed

Vulnerability record · CVE-2019-19838 · published 23 January 2020

CVE-2019-19838: Ruckuswireless unleashed os command injection vulnerability

Ruckuswireless · Unleashed

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.

9.8 CVSS 3.1 Critical EPSS 24% · top 2.2% CWE-78 · OS command injection
9.8CVSS 3.1 base score, v2 10.0
24%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the uploadFile attribute.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://alephsecurity.com/2020/01/14/ruckus-wireless ExploitTechnical DescriptionThird Party Advisory
https://fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html Third Party Advisory
https://www.ruckuswireless.com/security/299/view/txt Vendor Advisory
https://alephsecurity.com/2020/01/14/ruckus-wireless ExploitTechnical DescriptionThird Party Advisory
https://fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html Third Party Advisory
https://www.ruckuswireless.com/security/299/view/txt Vendor Advisory

Track CVE-2019-19838 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-22653Ruckuswireless r310 firmware improper verification of cryptographic signature vulnerabilityIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10…EPSS 0.55%9.8CVE-2020-22654Ruckuswireless r310 firmware download of code without integrity check vulnerabilityIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10…EPSS 0.34%9.8CVE-2020-22658Ruckuswireless r310 firmware download of code without integrity check vulnerabilityIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10…EPSS 0.51%9.8CVE-2019-19839Ruckuswireless unleashed os command injection vulnerabilityemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=i…EPSS 3.3%9.8CVE-2019-19840Ruckuswireless unleashed out-of-bounds write vulnerabilityA stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unaut…EPSS 4.1%9.8CVE-2019-19841Ruckuswireless unleashed os command injection vulnerabilityemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=p…EPSS 3.3%9.8CVE-2019-19842Ruckuswireless unleashed os command injection vulnerabilityemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=s…EPSS 5.0%9.8CVE-2019-19836Ruckuswireless unleashed improper input validation vulnerabilityAjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a POST request that uses tools/_rc…EPSS 3.6%

Source: NIST National Vulnerability Database (record CVE-2019-19838), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.