Vulnerabilities

TI-2020-07087 CVE-2020-8830 · GHSA-45fh-j4qp-56jm

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF…

LOW 39

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2020-05-05 No fix listed CWE-352

TI-2020-06503 CVE-2020-8033 · GHSA-78cq-mwm8-f6xp

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.

LOW 28

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-05-05 No fix listed CWE-79

TI-2020-06459 CVE-2020-7983 · GHSA-m82h-9vwq-8x29

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to…

LOW 36

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0062 Published 2020-05-05 No fix listed CWE-352

Vulnerabilities

Filters

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF…

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to…