9.8
CVE-2020-22658
- EPSS 0.36%
- Veröffentlicht 20.01.2023 19:15:12
- Zuletzt bearbeitet 03.04.2025 21:15:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to switch completely to unauthorized image to be Boot as primary verified image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruckuswireless ≫ R310 Firmware Version10.5.1.0.199
Ruckuswireless ≫ R500 Firmware Version10.5.1.0.199
Ruckuswireless ≫ R600 Firmware Version10.5.1.0.199
Ruckuswireless ≫ T300 Firmware Version10.5.1.0.199
Ruckuswireless ≫ T301n Firmware Version10.5.1.0.199
Ruckuswireless ≫ T301s Firmware Version10.5.1.0.199
Ruckuswireless ≫ Scg200 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Sz-100 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Sz-300 Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Vsz Firmware Version < 3.6.2.0.795
Ruckuswireless ≫ Zonedirector 1100 Firmware Version9.10.2.0.130
Ruckuswireless ≫ Zonedirector 1200 Firmware Version10.2.1.0.218
Ruckuswireless ≫ Zonedirector 3000 Firmware Version10.2.1.0.218
Ruckuswireless ≫ Zonedirector 5000 Firmware Version10.0.1.0.151
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.277 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-494 Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
https://support.ruckuswireless.com/security_bulletins/302