Commscope Ruckus Zoneflex R500 Firmware
3 CVEs affecting Commscope Ruckus Zoneflex R500 Firmware. Latest disclosed: 2020-05-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8830 | High | 8.8 | 2020-05-05 | CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wir… |
CVE-2020-7983 | High | 8.1 | 2020-05-05 | A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks. |
CVE-2020-8033 | Medium | 6.1 | 2020-05-05 | Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field. |