Critical severity9.8NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2019-19840

Description

A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ruckus/Unleasheddescription
Ruckus/Unleashed2 versions
cpe:2.3:o:ruckuswireless:unleashed:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:ruckuswireless:unleashed:*:*:*:*:*:*:*:*range: <200.7.10.202.94
- (no CPE)range: <=200.7.10.102.64
Ruckus/Zonedirector 1200 Firmware
cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*
Range: <9.10.2.0.84

Patches

Vulnerability mechanics

References

alephsecurity.com/2020/01/14/ruckus-wirelessnvdExploitTechnical DescriptionThird Party Advisory
fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.htmlnvdThird Party Advisory
www.ruckuswireless.com/security/299/view/txtnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000