Lucene search

MitreCVE-2020-22653

HistoryJan 20, 2023 - 7:15 p.m.

CVE-2020-22653

2023-01-2019:15:12

mitre

web.nvd.nist.gov

cve-2020-22653

ruckus

r310

r500

r600

t300

t301n

t301s

scg200

sz-100

sz300

vsz

zonedirector

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.

Affected configurations

Nvd

Node

ruckuswirelessr310Match-

AND

ruckuswirelessr310_firmwareMatch10.5.1.0.199

Node

ruckuswirelessr500Match-

AND

ruckuswirelessr500_firmwareMatch10.5.1.0.199

Node

ruckuswirelessr600Match-

AND

ruckuswirelessr600_firmwareMatch10.5.1.0.199

Node

ruckuswirelesst300Match-

AND

ruckuswirelesst300_firmwareMatch10.5.1.0.199

Node

ruckuswirelesst301nMatch-

AND

ruckuswirelesst301n_firmwareMatch10.5.1.0.199

Node

ruckuswirelesst301sMatch-

AND

ruckuswirelesst301s_firmwareMatch10.5.1.0.199

Node

ruckuswirelessscg200Match-

AND

ruckuswirelessscg200_firmwareRange<3.6.2.0.795

Node

ruckuswirelesssz-100Match-

AND

ruckuswirelesssz-100_firmwareRange<3.6.2.0.795

Node

ruckuswirelesssz-300_firmwareRange<3.6.2.0.795

AND

ruckuswirelesssz-300Match-

Node

ruckuswirelessvsz_firmwareRange<3.6.2.0.795

AND

ruckuswirelessvszMatch-

Node

ruckuswirelesszonedirector_1100_firmwareMatch9.10.2.0.130

AND

ruckuswirelesszonedirector_1100Match-

Node

ruckuswirelesszonedirector_1200_firmwareMatch10.2.1.0.218

AND

ruckuswirelesszonedirector_1200Match-

Node

ruckuswirelesszonedirector_3000_firmwareMatch10.2.1.0.218

AND

ruckuswirelesszonedirector_3000Match-

Node

ruckuswirelesszonedirector_5000_firmwareMatch10.0.1.0.151

AND

ruckuswirelesszonedirector_5000Match-

VendorProductVersionCPE
ruckuswirelessr310-cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*
ruckuswirelessr310_firmware10.5.1.0.199cpe:2.3:o:ruckuswireless:r310_firmware:10.5.1.0.199:*:*:*:*:*:*:*
ruckuswirelessr500-cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:*
ruckuswirelessr500_firmware10.5.1.0.199cpe:2.3:o:ruckuswireless:r500_firmware:10.5.1.0.199:*:*:*:*:*:*:*
ruckuswirelessr600-cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:*
ruckuswirelessr600_firmware10.5.1.0.199cpe:2.3:o:ruckuswireless:r600_firmware:10.5.1.0.199:*:*:*:*:*:*:*
ruckuswirelesst300-cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:*
ruckuswirelesst300_firmware10.5.1.0.199cpe:2.3:o:ruckuswireless:t300_firmware:10.5.1.0.199:*:*:*:*:*:*:*
ruckuswirelesst301n-cpe:2.3:h:ruckuswireless:t301n:-:*:*:*:*:*:*:*
ruckuswirelesst301n_firmware10.5.1.0.199cpe:2.3:o:ruckuswireless:t301n_firmware:10.5.1.0.199:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ruckuswireless	r310	-	cpe:2.3:h:ruckuswireless:r310:-:::::::*
ruckuswireless	r310_firmware	10.5.1.0.199	cpe:2.3:o:ruckuswireless:r310_firmware:10.5.1.0.199:::::::*
ruckuswireless	r500	-	cpe:2.3:h:ruckuswireless:r500:-:::::::*
ruckuswireless	r500_firmware	10.5.1.0.199	cpe:2.3:o:ruckuswireless:r500_firmware:10.5.1.0.199:::::::*
ruckuswireless	r600	-	cpe:2.3:h:ruckuswireless:r600:-:::::::*
ruckuswireless	r600_firmware	10.5.1.0.199	cpe:2.3:o:ruckuswireless:r600_firmware:10.5.1.0.199:::::::*
ruckuswireless	t300	-	cpe:2.3:h:ruckuswireless:t300:-:::::::*
ruckuswireless	t300_firmware	10.5.1.0.199	cpe:2.3:o:ruckuswireless:t300_firmware:10.5.1.0.199:::::::*
ruckuswireless	t301n	-	cpe:2.3:h:ruckuswireless:t301n:-:::::::*
ruckuswireless	t301n_firmware	10.5.1.0.199	cpe:2.3:o:ruckuswireless:t301n_firmware:10.5.1.0.199:::::::*

Rows per page:

1-10 of 281

References

hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1

support.ruckuswireless.com/security_bulletins/302

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

Related for CVE-2020-22653