Vulnerability in Ruckuswireless R310
CVE-2020-22659
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.003 (21.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 21.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Ruckuswireless R310
- Ruckuswireless R310 Firmware — versions 10.5.1.0.199
- Ruckuswireless R500
- Ruckuswireless R500 Firmware — versions 10.5.1.0.199
- Ruckuswireless R600
- Ruckuswireless R600 Firmware — versions 10.5.1.0.199
- Ruckuswireless Scg200
- Ruckuswireless Scg200 Firmware
- Ruckuswireless Sz-100
- Ruckuswireless Sz-100 Firmware
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2020-22659?
- CVE-2020-22659 is a high-severity vulnerability in Ruckuswireless R310, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.5/10. Published 2023-01-20.
- How severe is CVE-2020-22659?
- High severity. CVSS v3 base score is 7.5 out of 10.