CVE-2021-4474CWE-552

Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access

Medium · published March 26, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive information including configuration files, credentials, and system data stored on the device.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00457 · 38.6th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2026-03-26T19:28Z
EPSS history
Timeline
  • 26 MAR 19:28Z
    Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access
    cvelistv5