CVE-2019-19843

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p78

Published

Jan 22, 2020 (Jan 22, 2020)

Modified

Jun 17, 2026

Description

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and web/user/wps_tool_cache.

Vendors: ruckuswireless
Products: unleashed, zonedirector 1200 firmware
Weakness: CWE-522, CWE-552
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.