CVE-2013-5030 – Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass

https://notcve.org/view.php?id=CVE-2013-5030

Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access certain configuration/ and maintenance/ scripts, by constructing a crafted URI after receiving an authentication error for an arbitrary login attempt. Los dispositivos Ruckus Wireless Zoneflex con firmware 9.6.0.0.267 permite a atacantes remotos evadir la autenticación, y posteriormente acceder a los scripts configuration/ y maintenance/, mediante la construcción de un URI diseñado después de recibir un error de autenticación por un intento arbitrario de inicio de sesión. Ruckus Wireless Zoneflex 2942 wireless access point suffers from an authentication bypass vulnerability. • https://www.exploit-db.com/exploits/29709 http://www.kb.cert.org/vuls/id/742932 • CWE-264: Permissions, Privileges, and Access Controls •