CRITICAL🇵🇱 Wersja polska

CVE-2020-13916

CVSS 9.8v3.1pub. 2020-07-28upd. 2024-11-21

A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ruckuswireless C110

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless E510

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless H320

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless H510

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless M510

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R310

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R320

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R500

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R510

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R600

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R610

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R710

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R720

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R750

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T300

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T301n

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T301s

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T310c

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T310d

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T310n

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T310s

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T610

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T710

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T710s

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Unleashed Firmware

    OS
    Ruckuswireless
    ≤ 200.7.10.102.92
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2023-25717CRITICAL9.8⚠ KEVPL ✓same product

RCE bez uwierzytelnienia w Ruckus Wireless Admin (do wersji 10.4)

CVE-2020-22654CRITICAL9.8PL ✓same product

Ruckus Wireless — obejście weryfikacji sumy kontrolnej MD5 firmware

CVE-2020-22653CRITICAL9.8PL ✓same product

Ruckus Wireless — nieautoryzowane wstrzyknięcie sygnatury obrazu firmware

CVE-2020-22657CRITICAL9.1PL ✓same product

Pominięcie uwierzytelnienia w interfejsie WEB GUI urządzeń Ruckus Wireless

CVE-2020-22658CRITICAL9.8PL ✓same product

Ruckus Wireless — podmiana obrazu firmware na nieautoryzowany przy starcie