CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-19843
Critical (9.8) in ruckuswireless. EPSS 1.8% chance of exploitation in the next 30 days.
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-522, CWE-552
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ruckuswireless:unleashed
- ruckuswireless:zonedirector_1200_firmware