Design/Logic Flaw

2020-01-2219:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.

CPENameOperatorVersion
unleashedlt200.7.10.202.94
zonedirector_1200_firmwarelt9.10.2.0.84
zonedirector_1200_firmwarege9.12.0
zonedirector_1200_firmwarelt9.12.3.0.136
zonedirector_1200_firmwarege9.13.0
zonedirector_1200_firmwarelt10.0.1.0.90
zonedirector_1200_firmwarege10.1.0
zonedirector_1200_firmwarelt10.1.2.0.275
zonedirector_1200_firmwarege10.2.0
zonedirector_1200_firmwarelt10.2.1.0.147

Name	Operator	Version
unleashed	lt	200.7.10.202.94
zonedirector_1200_firmware	lt	9.10.2.0.84
zonedirector_1200_firmware	ge	9.12.0
zonedirector_1200_firmware	lt	9.12.3.0.136
zonedirector_1200_firmware	ge	9.13.0
zonedirector_1200_firmware	lt	10.0.1.0.90
zonedirector_1200_firmware	ge	10.1.0
zonedirector_1200_firmware	lt	10.1.2.0.275
zonedirector_1200_firmware	ge	10.2.0
zonedirector_1200_firmware	lt	10.2.1.0.147