Cross site request forgery (csrf)

2020-05-0518:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.

References

gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4