7.5

CVE-2021-36630

Exploit
DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruckuswireless ≫ Sz-300 Firmware Version <= 3.6.2
   Ruckuswireless ≫ Sz-300 Version-
Ruckuswireless ≫ Sz-144 Firmware Version <= 3.6.2
   Ruckuswireless ≫ Sz-144 Version-
Ruckuswireless ≫ Sz-100 Firmware Version <= 3.6.2
   Ruckuswireless ≫ Sz-100 Version-
Ruckuswireless ≫ Vsz Firmware Version <= 3.6.2
   Ruckuswireless ≫ Vsz Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.2% 0.804
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://anquan.baidu.com/article/1434
Third Party Advisory
Exploit
Mitigation
Technical Description
https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdf
Vendor Advisory
https://www.freebuf.com/articles/web/260338.html
Third Party Advisory
Exploit
https://github.com/lixiang957/CVE-2021-36630
Third Party Advisory
Exploit