CVE-2020-22653
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
Affected (14)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless R310 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless R500 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless R600 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless T300 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless T301n | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.5.1.0.199 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless T301s | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.6.2.0.795 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Scg200 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.6.2.0.795 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Sz 100 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.6.2.0.795 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Sz 300 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.6.2.0.795 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Vsz | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.10.2.0.130 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Zonedirector 1100 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.2.1.0.218 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Zonedirector 1200 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.2.1.0.218 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Zonedirector 3000 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0.1.0.151 |
| Running on/with | Platform Versions |
|---|---|
Ruckuswireless Zonedirector 5000 | All versions |
References (3)
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.