NetSight
critical9.8

CVE-2020-22654

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199…

Impact

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to bypass firmware image bad md5 checksum failed error.

Affected products

VendorProductAffected versions
RuckuswirelessR310 Firmware
Version 10.5.1.0.199
RuckuswirelessR500 Firmware
Version 10.5.1.0.199
RuckuswirelessR600 Firmware
Version 10.5.1.0.199
RuckuswirelessT300 Firmware
Version 10.5.1.0.199
RuckuswirelessT301n Firmware
Version 10.5.1.0.199
RuckuswirelessT301s Firmware
Version 10.5.1.0.199
RuckuswirelessScg200 Firmware
before 3.6.2.0.795
RuckuswirelessSz-100 Firmware
before 3.6.2.0.795
RuckuswirelessSz-300 Firmware
before 3.6.2.0.795
RuckuswirelessVsz Firmware
before 3.6.2.0.795
RuckuswirelessZonedirector 1100 Firmware
Version 9.10.2.0.130
RuckuswirelessZonedirector 1200 Firmware
Version 10.2.1.0.218

Weakness classification

References