Vulnerabilities (CVE)

Filtered by vendor Commscope Subscribe
Filtered by product Ruckus Iot Module
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-26878 1 Commscope 2 Ruckus Iot Module, Ruckus Vriot 2021-07-21 9.0 HIGH 8.8 HIGH
Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.