CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection

• CWE-78

• http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt
• http://www.securityfocus.com/bid/93539Third Party Advisory, VDB Entry
• http://www.tripwire.com/state-of-security/vulnerability-management/ruckus-vulnerability/Technical Description, Third Party Advisory
• https://bitbucket.org/dudux/ruckus-rootshellExploit, Third Party Advisory
• http://b910a83a1a1fa9c20d93-2435f2f08e773abe005b52170fce6d94.r84.cf2.rackcdn.com/security/faq-security-advisory-id-062117.txt
• http://www.securityfocus.com/bid/93539Third Party Advisory, VDB Entry
• http://www.tripwire.com/state-of-security/vulnerability-management/ruckus-vulnerability/Technical Description, Third Party Advisory
• https://bitbucket.org/dudux/ruckus-rootshellExploit, Third Party Advisory

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000155Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
• CVE-2016-1000156Mailcwp remote file upload vulnerability incomplete fix v1.1…
• CVE-2016-10002Incorrect processing of responses to If-None-Modified HTTP c…
• CVE-2016-1000213Ruckus Wireless H500 web management interface CSRF
• CVE-2016-1000214Ruckus Wireless H500 web management interface authentication…
• CVE-2016-1000215Ruckus Wireless H500 web management interface denial of serv…
• CVE-2016-1000217Zotpress plugin for WordPress SQLi in zp_get_account()
• CVE-2016-1000218Kibana Reporting plugin version 2.4.0 is vulnerable to a CSR…
• CVE-2016-1000219Kibana before 4.5.4 and 4.1.11 when a custom output is confi…
• CVE-2016-1000220Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS atta…
• CVE-2016-1000221Logstash prior to version 2.3.4, Elasticsearch Output plugin…
• CVE-2016-1000222Logstash prior to version 2.1.2, the CSV output can be attac…