CVE-2016-1000214

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Ruckus Wireless H500 web management interface authentication bypass

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-200CWE-287

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 25, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-10002157.5Ruckus Wireless H500 web management interface denial of serviceCVE-2016-10002168.8Ruckus Wireless H500 web management interface authenticated command injectionCVE-2016-10002179.8Zotpress plugin for WordPress SQLi in zp_get_account()CVE-2016-10002188.8Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports wheCVE-2016-10002197.5Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the CVE-2016-10002206.1Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browseCVE-2016-10002217.5Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive infoCVE-2016-10002227.5Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.CVE-2016-10002296.1swagger-ui has XSS in key namesCVE-2016-10002325.3NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result CVE-2016-10002364.4Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.CVE-2016-10002376.1sanitize-html before 1.4.3 has XSS.
CVE-2016-1000214: Medium severity, CVSS 5.3 | Vulnix