CVE-2020-21161

MediumCVSS 6.1

Published: 27/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

47th percentile - higher than 47% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability has been discovered in Ruckus Wireless ZoneDirector version 9.8.3.0. It allows a remote attacker to inject malicious scripts into the management interface.

Risk Assessment

The risk includes potential session hijacking of administrators, theft of credentials, or unauthorized actions within the network management interface.

Recommendation

Immediately upgrade ZoneDirector software to the latest available version that fixes this vulnerability. Also restrict access to the management interface to trusted IP addresses only.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.