CVE-2020-8830: Commscope Ruckus Zoneflex r500 Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.

Affected products

• Commscope Ruckus Zoneflex r500 Firmware: affected versions not specified

Published 2020-05-05. Last modified 2026-06-17.