CVE-2020-22653

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s…

Critical · published January 20, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

🚨 A crafty signature flaw in Ruckus devices lets attackers slip through the gates like a VIP with a fake badge! 🔥 Think of it as a security guard allowing someone in because they flashed a forged ID that looked just good enough to pass the check. This vulnerability lets unauthorized images be injected by exploiting the trust placed in official image signatures. An attacker could hijack the system, upload malicious images, and gain complete control over network operations — imagine the chaos if an intruder took over your Wi-Fi! This is absolutely devastating for network integrity and could lead to data breaches or service disruptions.

Put simply

Think of it as a security guard allowing someone in because they flashed a forged ID that looked just good enough to pass the check. This vulnerability lets unauthorized images be injected by exploiting the trust placed in official image signatures. This vulnerability in Ruckus devices allows an attacker to inject unauthorized image signatures by exploiting the verification mechanism, effectively bypassing security measures meant to protect against such tampering.

What to do

An attacker could hijack the system, upload malicious images, and gain complete control over network operations — imagine the chaos if an intruder took over your Wi-Fi! This is absolutely devastating for network integrity and could lead to data breaches or service disruptions. To protect your systems, upgrade to the fixed versions: SmartCell Gateway 200 (SCG200) 3.6.2.0.795, SmartZone 100/300 (SZ) 3.6.2.0.795, and the latest ZoneDirector versions. Always ensure your firmware is up to date and regularly review security protocols to prevent unauthorized access. You've got this! Patch those vulnerabilities and keep your networks secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Published
2023-01-20T00:00Z
EPSS history
Timeline
  • 20 JAN 00:00Z
    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s…
    cvelistv5