CRITICAL

CVE-2019-19840

CVSS v3

9.8

CRITICAL

EPSS Score

21.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

Technical details

Published
1/22/2020

Frequently asked questions

What is CVE-2019-19840?

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

Is CVE-2019-19840 actively exploited?

Active exploitation of CVE-2019-19840 has not been confirmed. The EPSS score is 21.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-19840?

CVE-2019-19840 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2019-19840 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.