Back to Database
Status published
High
CVE-2020-8830
CSRF in login.asp on Ruckus devices allows an attacker to...
Vulnerability Description
CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8830
Credits & Attribution
No credits recorded in the NVD database.
More from commscope
View All →CVE-2022-45701
Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE)...
Unknown
0
CVE-2022-27002
Arris TR3300 v1.0.13 were discovered to contain a command injection...
Critical
9.8
CVE-2022-27001
Arris TR3300 v1.0.13 were discovered to contain a command injection...
Critical
9.8
CVE-2022-27000
Arris TR3300 v1.0.13 was discovered to contain a command injection...
Critical
9.8
CVE-2022-26999
Arris TR3300 v1.0.13 was discovered to contain a command injection...
Critical
9.8
Affected Vendor
commscope
View all reports →Affected Software
ruckus zoneflex r500 firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
May 5th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.