Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-13913

An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.

Published

2020-07-28T15:15:11.517

Last Modified

2024-11-21T05:02:08.097

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ruckuswireless unleashed_firmware ≤ 200.7.10.102.92 Yes
Hardware ruckuswireless c110 - No
Hardware ruckuswireless e510 - No
Hardware ruckuswireless h320 - No
Hardware ruckuswireless h510 - No
Hardware ruckuswireless m510 - No
Hardware ruckuswireless r310 - No
Hardware ruckuswireless r320 - No
Hardware ruckuswireless r500 - No
Hardware ruckuswireless r510 - No
Hardware ruckuswireless r600 - No
Hardware ruckuswireless r610 - No
Hardware ruckuswireless r710 - No
Hardware ruckuswireless r720 - No
Hardware ruckuswireless r750 - No
Hardware ruckuswireless t300 - No
Hardware ruckuswireless t301n - No
Hardware ruckuswireless t301s - No
Hardware ruckuswireless t310c - No
Hardware ruckuswireless t310d - No
Hardware ruckuswireless t310n - No
Hardware ruckuswireless t310s - No
Hardware ruckuswireless t610 - No
Hardware ruckuswireless t710 - No
Hardware ruckuswireless t710s - No
References