What is CVE-2020-13918?

CVE-2020-13918 is a high-severity vulnerability in Ruckuswireless C110. CVSS score: 7.5/10. Published 2020-07-28.

How severe is CVE-2020-13918?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Ruckuswireless C110

CVE-2020-13918

Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be used for a jailbreak) via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.

EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Ruckuswireless C110
Ruckuswireless E510
Ruckuswireless H320
Ruckuswireless H510
Ruckuswireless M510
Ruckuswireless R310
Ruckuswireless R320
Ruckuswireless R500
Ruckuswireless R510
Ruckuswireless R600

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-13918?: CVE-2020-13918 is a high-severity vulnerability in Ruckuswireless C110. CVSS score: 7.5/10. Published 2020-07-28.
How severe is CVE-2020-13918?: High severity. CVSS v3 base score is 7.5 out of 10.