Login Request a demo
High severity · published Jan 18, 2023
CVE-2021-36630
DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request
7.5
CVSS
2.3%
EPSS
No
On KEV
Description
DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Sz-100 Firmware · Ruckuswireless
through 3.6.2 · source: NVD
SF
Sz-144 Firmware · Ruckuswireless
through 3.6.2 · source: NVD
SF
Sz-300 Firmware · Ruckuswireless
through 3.6.2 · source: NVD
VF
Vsz Firmware · Ruckuswireless
through 3.6.2 · source: NVD
Affected product
SF
Sz-100 Firmware
Ruckuswireless
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-36630
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-36630
Exploit
https://anquan.baidu.com/article/1434
Exploit
https://github.com/lixiang957/CVE-2021-36630
Vendor Advisory
https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdf
Exploit
https://www.freebuf.com/articles/web/260338.html
More from Sz-100 Firmware
9.8
CVE-2020-22658
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.8
CVE-2020-22653
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.8
CVE-2020-22654
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.1
CVE-2020-22657
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway…
9.1
CVE-2018-11036
Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote…