Commscope Ruckus Zoneflex R500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Commscope Ruckus Zoneflex R500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-8830 — CVSS 8.8 (high): CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the…
• CVE-2020-7983 — CVSS 8.1 (high): A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.
• CVE-2020-8033 — CVSS 6.1 (medium): Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.