Stored Cross-Site Scripting in Ruckus ZoneFlex R310 Devices
CVE-2020-7234

4.8MEDIUM

Key Information:

Vendor

Ruckuswireless

Status
R310 Firmware
Vendor
CVE Published:
19 January 2020

What is CVE-2020-7234?

Ruckus ZoneFlex R310 devices are susceptible to stored Cross-Site Scripting (XSS) through the SSID field within the Configuration settings. This vulnerability allows attackers, after gaining access to the super account, to inject malicious scripts. When other users view the affected SSID, their browsers execute these scripts, potentially compromising user data and session integrity.

References

https://sku11army.blogspot.com/2020/01/ruckus-wireless-au...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.