Ruckus Wireless Zonedirector Firmware vulnerabilities

3 CVEs affecting Ruckus Wireless Zonedirector Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49225, published 2023-12-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6224, published 2017-10-13. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x,…
CVE-2020-21161, published 2022-06-27. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
CVE-2023-49225, published 2023-12-07. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web…