CVE-2020-13915

Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions 200.7.10.102.92 and earlier

Description Insecure permissions in emfd/libemf allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This issue affects various Ruckus Wireless Unleashed devices, including C110, E510, H320, H510, M510, R320, R310, R500, R510, R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s.

Recommendations For Ruckus Wireless Unleashed versions 200.7.10.102.92 and earlier, consider disabling the emfd/libemf component until a patch is available to prevent the overwriting of admin credentials via crafted HTTP requests. Restrict access to the affected devices to minimize the risk of exploitation.