CVE-2020-13915

7.5 highEPSS 1.9%

High (7.5) in ruckuswireless unleashed firmware. EPSS 1.9% chance of exploitation in the next 30 days.

Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-732
Published: 2020-07-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruckuswireless:unleashed_firmware

References

https://support.ruckuswireless.com/security_bulletins/304
https://support.ruckuswireless.com/security_bulletins/304

Check your stack JSON