CVE-2019-19840

CRITICAL

9.8

CVSS Score

Published: January 22, 2020 at 08:32 PM UTC

Updated: June 17, 2026 at 02:27 AM UTC

17 products affected across 1 vendorZonedirector 1200 FirmwareUnleashedR310

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 4%

Description

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Unleashed · Ruckuswireless

95%

v < 200.7.10.202.94

Affected range stops below 200.7.10.202.94, so it looks safe — our inference, not a vendor statement

ruckuswireless-c110 (environment) · ruckuswireless-e510 (environment) · ruckuswireless-h320 (environment) · ruckuswireless-h510 (environment) · ruckuswireless-m510 (environment) · ruckuswireless-r310 (environment) · ruckuswireless-r320 (environment) · ruckuswireless-r510 (environment) · ruckuswireless-r610 (environment) · ruckuswireless-r710 (environment) · ruckuswireless-r720 (environment) · ruckuswireless-t310 (environment) · ruckuswireless-t610 (environment) · ruckuswireless-t710 (environment)

Zonedirector 1200 Firmware · Ruckuswireless

95%

v < 9.10.2.0.8410.1.0 ≤ v < 10.1.2.0.27510.2.0 ≤ v < 10.2.1.0.14710.3.0 ≤ v < 10.3.1.0.219.12.0 ≤ v < 9.12.3.0.1369.13.0 ≤ v < 10.0.1.0.90

Affected range stops below 10.0.1.0.90, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.1.2.0.275, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.2.1.0.147, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.3.1.0.21, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.10.2.0.84, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.12.3.0.136, so it looks safe — our inference, not a vendor statement

ruckuswireless-zonedirector-1200 (same device)

C110 · Ruckuswirelessdevice

80%