CVEvulnerability

CVE-2020-22658

9.8 CRITICAL Published 2023-01-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-494

Description

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to switch completely to unauthorized image to be Boot as primary verified image.

Affected configurations

• ruckuswireless r310 firmware 10.5.1.0.199 • ruckuswireless r500 firmware 10.5.1.0.199 • ruckuswireless r600 firmware 10.5.1.0.199 • ruckuswireless t300 firmware 10.5.1.0.199 • ruckuswireless t301n firmware 10.5.1.0.199 • ruckuswireless t301s firmware 10.5.1.0.199 • ruckuswireless scg200 firmware (< 3.6.2.0.795) • ruckuswireless sz-100 firmware (< 3.6.2.0.795) • ruckuswireless sz-300 firmware (< 3.6.2.0.795) • ruckuswireless vsz firmware (< 3.6.2.0.795) • ruckuswireless zonedirector 1100 firmware 9.10.2.0.130 • ruckuswireless zonedirector 1200 firmware 10.2.1.0.218 • ruckuswireless zonedirector 3000 firmware 10.2.1.0.218 • ruckuswireless zonedirector 5000 firmware 10.0.1.0.151

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References