CVE-2020-22661
Description
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to erase the backup secondary official image and write secondary backup unauthorized image.
How to fix
- ruckuswireless scg200_firmware3.6.2.0.795 or later
- ruckuswireless sz-100_firmware3.6.2.0.795 or later
- ruckuswireless sz-300_firmware3.6.2.0.795 or later
- ruckuswireless vsz_firmware3.6.2.0.795 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruckuswireless r310_firmware | 10.5.1.0.199 | — |
| ruckuswireless r500_firmware | 10.5.1.0.199 | — |
| ruckuswireless r600_firmware | 10.5.1.0.199 | — |
| ruckuswireless t300_firmware | 10.5.1.0.199 | — |
| ruckuswireless t301n_firmware | 10.5.1.0.199 | — |
| ruckuswireless t301s_firmware | 10.5.1.0.199 | — |
| ruckuswireless scg200_firmware | v < 3.6.2.0.795 | 3.6.2.0.795 |
| ruckuswireless sz-100_firmware | v < 3.6.2.0.795 | 3.6.2.0.795 |
| ruckuswireless sz-300_firmware | v < 3.6.2.0.795 | 3.6.2.0.795 |
| ruckuswireless vsz_firmware | v < 3.6.2.0.795 | 3.6.2.0.795 |
| ruckuswireless zonedirector_1100_firmware | 9.10.2.0.130 | — |
| ruckuswireless zonedirector_1200_firmware | 10.2.1.0.218 | — |
| ruckuswireless zonedirector_3000_firmware | 10.2.1.0.218 | — |
| ruckuswireless zonedirector_5000_firmware | 10.0.1.0.151 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.