Arris Ruckus Zoneflex R500 vulnerabilities

1 vulnerability

Known vulnerabilities in Arris Ruckus Zoneflex R500, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2020-8438arrisruckus_zoneflex_r500_firmware
EPSS score
1.59%
Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring.