High severity · published Jan 20, 2023
CVE-2020-22659
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
R310 Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
RF
R500 Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
RF
R600 Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
SF
Scg200 Firmware · Ruckuswireless
before 3.6.2.0.795 · source: NVD
SF
Sz-100 Firmware · Ruckuswireless
before 3.6.2.0.795 · source: NVD
SF
Sz-300 Firmware · Ruckuswireless
before 3.6.2.0.795 · source: NVD
TF
T300 Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
TF
T301n Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
TF
T301s Firmware · Ruckuswireless
10.5.1.0.199 · source: NVD
VF
Vsz Firmware · Ruckuswireless
before 3.6.2.0.795 · source: NVD
Z1
Zonedirector 1100 Firmware · Ruckuswireless
9.10.2.0.130 · source: NVD
Z1
Zonedirector 1200 Firmware · Ruckuswireless
10.2.1.0.218 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-22659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-22659
hdhrmi.blogspot.com
https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
Patch
https://support.ruckuswireless.com/security_bulletins/302
More from R310 Firmware
9.8
CVE-2020-22658
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.8
CVE-2020-22653
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.8
CVE-2020-22654
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.1
CVE-2020-22657
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
8.8
CVE-2017-6229
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x…