CVE-2020-13913

An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c,...

CommScope Ruckus ZoneFlex R500 Cross-Site Scripting Vulnerability

CommScope Ruckus ZoneFlex R500 is a wireless access point product from CommScope, Inc. A cross-site scripting vulnerability exists in CommScope Ruckus ZoneFlex R500 version 3.4.2.0.384. No details of the vulnerability are provided at this time...

CVE-2020-7983

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks...

CVE-2020-7983

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks...

CVE-2020-8033

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

CVE-2020-8033

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

Cross site request forgery (csrf)

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks...

Cross site request forgery (csrf)

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...

Design/Logic Flaw

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

CVE-2020-8830

CVE-2020-8830 affects Ruckus ZoneFlex/CommScope Ruckus hardware with CSRF in login.asp that can let an attacker access the panel and perform SSRF to crawl or analyze via the SUBCA-1 field on the Wireless Admin screen. The connected documents corroborate the CSRF flaw and SSRF usage vector but do ...

CVE-2020-8830

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...

CVE-2020-8033

CVE-2020-8033 affects CommScope/Ruckus ZoneFlex R500 devices running firmware 3.4.2.0.384. The vulnerability is a Cross-Site Scripting (XSS) issue in the web UI, exploitable via the index.asp Device Name field. The connected documents do not provide detailed exploit steps, impact scope, or remedi...

CVE-2020-8033

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

CVE-2020-7983

CVE-2020-7983 affects CommScope Ruckus ZoneFlex R500 devices running 3.4.2.0.384. The vulnerability is a CSRF in login.asp that could allow remote attackers to access the administrative panel and potentially perform SSRF attacks. Affected component is the login page (login.asp); root cause detail...

CVE-2020-7983

A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks...

Ruckus Wireless Unleashed emfd Arbitrary OS Command Execution Vulnerability

Ruckus Wireless Unleashed is a wireless virtual control device. The Ruckus Wireless Unleashed emfd admin/cmdstat.jsp fails to properly handle the xcmd=import-category attribute, which can be exploited by a remote attacker to submit a special POST request that can be used in the application contex...

Ruckus ZoneFlex R500 OS Command Execution Vulnerability

The Ruckus ZoneFlex is a Wi-Fi access point. A security vulnerability in the Ruckus ZoneFlex R500 /forms/nslookupHandler form processing parameter allows remote attackers to exploit the vulnerability to submit a special request that can execute arbitrary OS commands...

Ruckus Unleashed zap_parse_args Stack Overflow Vulnerability

Ruckus Unleashed is a high-performance, easy-to-setup, easy-to-manage and affordable portfolio of access points APs. Ruckus Unleashed zapparseargs suffers from a stack overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the application or...

CVE-2020-8438

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat$IFS substring...

CVE-2020-8438

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat$IFS substring...