CVE-2018-11036

CRITICAL

Ruckuswireless Vsz Firmware - Information Disclosure

Title source: rule

Description

Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain sensitive information or modify data.

References (1)

Core 1

Core References

Mailing List, Vendor Advisory x_refsource_misc

https://www.ruckuswireless.com/security/279/view/txt

Scores

CVSS v3 9.1

EPSS 0.0134

EPSS Percentile 67.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-200

Status published

Products (16)

ruckuswireless/scg-200_firmware 3.5.0

ruckuswireless/scg-200_firmware 3.5.1

ruckuswireless/scg-200_firmware 3.6.0

ruckuswireless/scg-200_firmware 3.6.1

ruckuswireless/sz-100_firmware 3.5.0

ruckuswireless/sz-100_firmware 3.5.1

ruckuswireless/sz-100_firmware 3.6.0

ruckuswireless/sz-100_firmware 3.6.1

ruckuswireless/sz-300_firmware 3.5.0

ruckuswireless/sz-300_firmware 3.5.1

... and 6 more

Published May 31, 2018

Tracked Since Feb 18, 2026