Cross site request forgery (csrf)

2020-05-0518:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.

CPENameOperatorVersion
ruckus_zoneflex_r500_firmwareeq3.4.2.0.384

CPE	Name	Operator	Version
	ruckus_zoneflex_r500_firmware	eq	3.4.2.0.384

References

gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4