Medium severity5.3NVD Advisory· Published Jan 23, 2020· Updated Jun 17, 2026

CVE-2019-19837

Description

Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ruckus Wireless/Unleasheddescription
Ruckus/Unleashedllm-create2 versions
<=200.7.10.102.64+ 1 more
- (no CPE)range: <=200.7.10.102.64
- cpe:2.3:o:ruckuswireless:unleashed:*:*:*:*:*:*:*:*range: <200.7.10.202.94
Ruckus/Zonedirector 1200 Firmware
cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:*:*:*:*:*:*:*:*
Range: <9.10.2.0.84

Patches

Vulnerability mechanics

References

alephsecurity.com/2020/01/14/ruckus-wirelessnvdExploitTechnical DescriptionThird Party Advisory
fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.htmlnvdThird Party Advisory
www.ruckuswireless.com/security/299/view/txtnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000