CVE-2021-36630

Published: Jan 18, 2023Modified: Apr 4, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.

Affected (4)

Products: Ruckuswireless: Sz 300 Firmware, Sz 144 Firmware, Sz 100 Firmware, Vsz Firmware

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Sz 300 Firmware	Up to 3.6.2

Running on/with	Platform Versions
Ruckuswireless Sz 300	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Sz 144 Firmware	Up to 3.6.2

Running on/with	Platform Versions
Ruckuswireless Sz 144	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Sz 100 Firmware	Up to 3.6.2

Running on/with	Platform Versions
Ruckuswireless Sz 100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Vsz Firmware	Up to 3.6.2

Running on/with	Platform Versions
Ruckuswireless Vsz	All versions

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (12)

http://ruckus.com

Source: cve@mitre.org

Not Applicable

http://smartzone-100.com

Source: cve@mitre.org

Broken Link

https://anquan.baidu.com/article/1434

Source: cve@mitre.org

ExploitMitigationTechnical DescriptionThird Party Advisory

https://github.com/lixiang957/CVE-2021-36630

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdf

Source: cve@mitre.org

Vendor Advisory

https://www.freebuf.com/articles/web/260338.html

Source: cve@mitre.org

ExploitThird Party Advisory

http://ruckus.com