CVE:CVE-2020-8438
CNNVD:CNNVD-202001-1323
Ruckus ZoneFlex R500 104.0.0.0.1347版本中隐藏的/forms/nslookupHandler表单存在操作系统命令注入漏洞。攻击者可借助特制请求利用该漏洞在系统上执行任意命令。
solution:Upgrade arris ruckus_zoneflex_r500_firmware to a higher version than 104.0.0.0.1347,and avoid the version 104.0.0.0.1347