Commscope Ruckus Vriot vulnerabilities

2 vulnerabilities

Known vulnerabilities in Commscope Ruckus Vriot, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CVE-2020-26878commscoperuckus_vriot
EPSS score
11.59%
Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.10CVE-2020-26879commscoperuckus_vriot
EPSS score
44.37%
Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.