Commscope Ruckus Iot Controller vulnerabilities

7 vulnerabilities

Known vulnerabilities in Commscope Ruckus Iot Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2021-33217commscoperuckus_iot_controller
EPSS score
1.38%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web Application allows Arbitrary Read/Write actions by authenticated users. The API allows an HTTP POST of arbitrary content into any file on the filesystem as root.9.8CVE-2021-33216commscoperuckus_iot_controller
EPSS score
13.77%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowing shell access via a developer account.10CVE-2021-33218commscoperuckus_iot_controller
EPSS score
2.30%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access.9.8CVE-2021-33221commscoperuckus_iot_controller
EPSS score
56.08%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Unauthenticated API Endpoints.9.8CVE-2021-33219commscoperuckus_iot_controller
EPSS score
2.15%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded Web Application Administrator Passwords for the admin and nplus1user accounts.4.3CVE-2021-33215commscoperuckus_iot_controller
EPSS score
1.19%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal.7.8CVE-2021-33220commscoperuckus_iot_controller
EPSS score
0.25%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist.