Commscope Ruckus Iot Module
2 CVEs affecting Commscope Ruckus Iot Module. Latest disclosed: 2020-10-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-26879 | Critical | 9.8 | 2020-10-26 | Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by… |
CVE-2020-26878 | High | 8.8 | 2020-10-26 | Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injec… |