Ruckus Wireless Unleashed Firmware vulnerabilities

8 CVEs affecting Ruckus Wireless Unleashed Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-13919, published 2020-07-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-13916, published 2020-07-28. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510,…
CVE-2020-13919, published 2020-07-28. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP request. This affects C110, E510, H320, H510, M510, R320,…
CVE-2020-13918, published 2020-07-28. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be used for a jailbreak) via an unauthenticated…
CVE-2020-13914, published 2020-07-28. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the webserver via an unauthenticated crafted HTTP request. This…
CVE-2020-13917, published 2020-07-28. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a crafted CLI command. This affects C110, E510, H320, H510,…
CVE-2020-13915, published 2020-07-28. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This…
CVE-2020-13913, published 2020-07-28. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510,…
CVE-2017-6224, published 2017-10-13. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x,…