EUVD-2020-29673

Malware in sbrugna...

CVE-2020-8830

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...

Remote code execution

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?loginusername=admin&password=password$curl substring...

PT-2023-2627 · Ruckus Wireless · Ruckus Wireless Admin

Name of the Vulnerable Software and Affected Versions: Ruckus Wireless Admin versions prior to 10.4 Description: The issue concerns a Remote Code Execution vulnerability in Ruckus Wireless Admin, allowing an unauthenticated attacker to execute arbitrary code via an HTTP GET request. This can be...

CVE-2023-25717

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?loginusername=admin&password=password$curl substring...

CommScope Ruckus ZoneFlex R500 Cross-Site Request Forgery Vulnerability

CommScope Ruckus ZoneFlex R500 is a wireless access point product from CommScope, Inc. A cross-site request forgery vulnerability exists in the login.asp page in the CommScope Ruckus ZoneFlex R500. An attacker could exploit this vulnerability to perform a crawl or other analysis with the SUBCA-1...

CVE-2020-8830

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...

Cross site request forgery (csrf)

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen...

CVE-2020-8830

CVE-2020-8830 affects Ruckus ZoneFlex/CommScope Ruckus hardware with CSRF in login.asp that can let an attacker access the panel and perform SSRF to crawl or analyze via the SUBCA-1 field on the Wireless Admin screen. The connected documents corroborate the CSRF flaw and SSRF usage vector but do ...