CVE-2020-7234: XSS
Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wireless X screen (after a successful login to the super account).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7234?
CVE-2020-7234 is classified as a medium severity vulnerability due to the potential for stored cross-site scripting (XSS).
How can I fix CVE-2020-7234?
To fix CVE-2020-7234, update the Ruckus ZoneFlex R310 firmware to a version that addresses the stored XSS vulnerability.
What products are affected by CVE-2020-7234?
CVE-2020-7234 affects Ruckus ZoneFlex R310 devices running firmware version 104.0.0.0.1347.
What kind of attack is possible with CVE-2020-7234?
CVE-2020-7234 allows attackers to execute stored XSS attacks via the SSID field on the configuration screen after accessing the super account.
Is authentication required to exploit CVE-2020-7234?
Yes, CVE-2020-7234 requires successful login to the super account to exploit the stored XSS vulnerability.