CRITICAL🇵🇱 Wersja polska

CVE-2020-22657

CVSS 9.1v3.1pub. 2023-01-20upd. 2025-04-03

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to perform WEB GUI login authentication bypass.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Ruckuswireless R310

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R310 Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless R500

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R500 Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless R600

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless R600 Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless Scg200

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Scg200 Firmware

    OS
    Ruckuswireless
    < 3.6.2.0.795

  • Ruckuswireless Sz 100

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Sz 100 Firmware

    OS
    Ruckuswireless
    < 3.6.2.0.795

  • Ruckuswireless Sz 300

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Sz 300 Firmware

    OS
    Ruckuswireless
    < 3.6.2.0.795

  • Ruckuswireless T300

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T300 Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless T301n

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T301n Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless T301s

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless T301s Firmware

    OS
    Ruckuswireless
    10.5.1.0.199

  • Ruckuswireless Vsz

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Vsz Firmware

    OS
    Ruckuswireless
    < 3.6.2.0.795

  • Ruckuswireless Zonedirector 1100

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Zonedirector 1100 Firmware

    OS
    Ruckuswireless
    9.10.2.0.130

  • Ruckuswireless Zonedirector 1200

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Zonedirector 1200 Firmware

    OS
    Ruckuswireless
    10.2.1.0.218

  • Ruckuswireless Zonedirector 3000

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Zonedirector 3000 Firmware

    OS
    Ruckuswireless
    10.2.1.0.218

  • Ruckuswireless Zonedirector 5000

    HW
    Ruckuswireless
    all versions

  • Ruckuswireless Zonedirector 5000 Firmware

    OS
    Ruckuswireless
    10.0.1.0.151
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-25717CRITICAL9.8⚠ KEVPL ✓same product

RCE bez uwierzytelnienia w Ruckus Wireless Admin (do wersji 10.4)

CVE-2020-22653CRITICAL9.8PL ✓same product

Ruckus Wireless — nieautoryzowane wstrzyknięcie sygnatury obrazu firmware

CVE-2020-22654CRITICAL9.8PL ✓same product

Ruckus Wireless — obejście weryfikacji sumy kontrolnej MD5 firmware

CVE-2020-22658CRITICAL9.8PL ✓same product

Ruckus Wireless — podmiana obrazu firmware na nieautoryzowany przy starcie

CVE-2020-13916CRITICAL9.8PL ✓same product

Stack buffer overflow w Ruckus Wireless Unleashed — zdalne wykonanie kodu