RZ
Product
Ruckus Zoneflex R500 Firmware
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Ruckus Zoneflex R500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8830 | 8.8 | May 5 | CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen Affected: All versions, or not specified |
| CVE-2020-7983 | 8.1 | May 5 | A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks Affected: 3.4.2.0.384 |
| CVE-2020-8033 | 6.1 | May 5 | Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field Affected: 3.4.2.0.384 |
Showing 3