9.8
CVE-2020-22653
- EPSS 0.51%
- Veröffentlicht 20.01.2023 19:15:12
- Zuletzt bearbeitet 03.04.2025 18:15:38
- Erkennungen
LoginIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruckuswireless ≫ R310 Firmware Version 10.5.1.0.199
Ruckuswireless ≫ R500 Firmware Version 10.5.1.0.199
Ruckuswireless ≫ R600 Firmware Version 10.5.1.0.199
Ruckuswireless ≫ T300 Firmware Version 10.5.1.0.199
Ruckuswireless ≫ T301n Firmware Version 10.5.1.0.199
Ruckuswireless ≫ T301s Firmware Version 10.5.1.0.199
Ruckuswireless ≫ Scg200 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Sz-100 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Sz-300 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Vsz Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Zonedirector 1100 Firmware Version 9.10.2.0.130
Ruckuswireless ≫ Zonedirector 1200 Firmware Version 10.2.1.0.218
Ruckuswireless ≫ Zonedirector 3000 Firmware Version 10.2.1.0.218
Ruckuswireless ≫ Zonedirector 5000 Firmware Version 10.0.1.0.151
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.51% | 0.407 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| CISA-ADP | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
https://support.ruckuswireless.com/security_bulletins/302