CVE-2020-8830

2020-05-0517:12:17

mitre

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.

References

gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4