CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2020-8830
High (8.8) in commscope ruckus zoneflex r500 firmware. EPSS 0.5% chance of exploitation in the next 30 days.
CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-352, CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- commscope:ruckus_zoneflex_r500_firmware