Obtaining a root shell on Ruckus ZoneDirector
ZoneDirector releases after 31 Aug 2023 (e.g. 10.2.1.0.236+, 10.5.1.0.265+)
Ruckus implemented firmware signing in ZoneDirector 10.2.1.0 build 236 and 10.5.1.0 build 265.
So you will need to download an older 10.2.1.0 or 10.5.1.0 build from https://support.ruckuswireless.com/software (e.g. I used 10.5.1.0 build 255) and do an 'upgrade' (Administer
> Upgrade
).
TIP
Your support entitlement isn't checked if you're just installing a different build of the currently installed ZoneDirector version.
Now you can follow the procedure, below, for older ZoneDirector releases.
Note that you will lose your Root Shell if you re-upgrade your ZoneDirector.
ZoneDirector releases 15 Nov 2019 - 31 Aug 2023
The procedure below permanently adds a root shell command to your ZoneDirector CLI.
If you prefer a temporary, one-time use, root shell then follow the instructions here.
This patch should be uploaded as a Software Upgrade (Administer
> Upgrade
> Software Upgrade
).
TIP
The upload process completes the patching; no upgrade will be offered. Instead you will be given instructions on using the root shell.
TIP
The upgrade will also add a temporary Upgrade Entitlement if necessary. Subsequent software upgrades will disable the root shell: you will need to re-apply this patch each time you upgrade your ZoneDirector's software.
In case you miss the instructions, to access the root shell from the CLI:-
ruckus> enable
ruckus# debug
You have all rights in this mode.
ruckus(debug)# script
ruckus(script)# exec .root.sh
Ruckus Wireless ZoneDirector -- Command Line Interface
ruckus$
TIP
You can, if you wish, create the patch yourself.
ZoneDirector 9.x/10.x releases prior to 15 Nov 2019
Use CVE-2019-19834:-
ruckus> enable
ruckus# debug
You have all rights in this mode.
ruckus(debug)# script
ruckus(script)# exec ../../../bin/sh
Ruckus Wireless ZoneDirector -- Command Line Interface
Enter 'help' for a list of built-in commands.
ruckus$ stty echo
ruckus$
ZoneDirector 3.0 - 8.x
The CLI has an unprivileged !v54!
command which drops you straight to the root shell:-
ruckus% !v54!
ruckus%
TIP
Really though, you should just upgrade to 9.3 or later.
If you're still using 3.0 because upgrade functionality is broken on modern PCs then follow the steps here.