CVE-2020-22660 : In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199,

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to force bypass Secure Boot failed attempts and run temporarily the previous Backup image.

Published 2023-01-20 19:15:13

Updated 2024-08-06 21:16:03

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-22660

Ruckuswireless » Zonedirector 1200 Firmware » Version: 10.2.1.0.218
cpe:2.3:o:ruckuswireless:zonedirector_1200_firmware:10.2.1.0.218:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Zonedirector 1200 » Version: N/A
Ruckuswireless » Zonedirector 3000 Firmware » Version: 10.2.1.0.218
cpe:2.3:o:ruckuswireless:zonedirector_3000_firmware:10.2.1.0.218:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Zonedirector 3000 » Version: N/A
Ruckuswireless » Vsz Firmware
Versions before (<) 3.6.2.0.795
cpe:2.3:o:ruckuswireless:vsz_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » VSZ » Version: N/A
Ruckuswireless » Sz-300 Firmware
Versions before (<) 3.6.2.0.795
cpe:2.3:o:ruckuswireless:sz-300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Sz-300 » Version: N/A
Ruckuswireless » Sz-100 Firmware
Versions before (<) 3.6.2.0.795
cpe:2.3:o:ruckuswireless:sz-100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Sz-100 » Version: N/A
Ruckuswireless » R500 Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:r500_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » R500 » Version: N/A
Ruckuswireless » R600 Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:r600_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » R600 » Version: N/A
Ruckuswireless » R310 Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:r310_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » R310 » Version: N/A
Ruckuswireless » T300 Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:t300_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » T300 » Version: N/A
Ruckuswireless » T301n Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:t301n_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » T301n » Version: N/A
Ruckuswireless » T301s Firmware » Version: 10.5.1.0.199
cpe:2.3:o:ruckuswireless:t301s_firmware:10.5.1.0.199:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » T301s » Version: N/A
Ruckuswireless » Scg200 Firmware
Versions before (<) 3.6.2.0.795
cpe:2.3:o:ruckuswireless:scg200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Scg200 » Version: N/A
Ruckuswireless » Zonedirector 1100 Firmware » Version: 9.10.2.0.130
cpe:2.3:o:ruckuswireless:zonedirector_1100_firmware:9.10.2.0.130:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Zonedirector 1100 » Version: N/A
Ruckuswireless » Zonedirector 5000 Firmware » Version: 10.0.1.0.151
cpe:2.3:o:ruckuswireless:zonedirector_5000_firmware:10.0.1.0.151:*:*:*:*:*:*:*
Matching versions
When used together with: Ruckuswireless » Zonedirector 5000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-22660

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 37 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-22660

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None

References for CVE-2020-22660

https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1

AIMAN AL-HADHRAMI: Vulnerabilities in Ruckus Network Products

CVEs referencing this url
https://support.ruckuswireless.com/security_bulletins/302

20200302 | Security Bulletins | Ruckus Wireless Support
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-22660

Products affected by CVE-2020-22660

Exploit prediction scoring system (EPSS) score for CVE-2020-22660

CVSS scores for CVE-2020-22660

References for CVE-2020-22660