Vulnerability Intelligence Report
CVE-2020-22653
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:0.44%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-347 ↗CWE-347 Improper Verification of Cryptographic Signature
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ruckuswireless | r310_firmware | 10.5.1.0.199 |
| ruckuswireless | r310 | all |
| ruckuswireless | r500_firmware | 10.5.1.0.199 |
| ruckuswireless | r500 | all |
| ruckuswireless | r600_firmware | 10.5.1.0.199 |
| ruckuswireless | r600 | all |
| ruckuswireless | t300_firmware | 10.5.1.0.199 |
| ruckuswireless | t300 | all |
| ruckuswireless | t301n_firmware | 10.5.1.0.199 |
| ruckuswireless | t301n | all |
| ruckuswireless | t301s_firmware | 10.5.1.0.199 |
| ruckuswireless | t301s | all |
| ruckuswireless | scg200_firmware | all |
| ruckuswireless | scg200 | all |
| ruckuswireless | sz-100_firmware | all |
| ruckuswireless | sz-100 | all |
| ruckuswireless | sz-300_firmware | all |
| ruckuswireless | sz-300 | all |
| ruckuswireless | vsz_firmware | all |
| ruckuswireless | vsz | all |
| ruckuswireless | zonedirector_1100_firmware | 9.10.2.0.130 |
| ruckuswireless | zonedirector_1100 | all |
| ruckuswireless | zonedirector_1200_firmware | 10.2.1.0.218 |
| ruckuswireless | zonedirector_1200 | all |
| ruckuswireless | zonedirector_3000_firmware | 10.2.1.0.218 |
| ruckuswireless | zonedirector_3000 | all |
| ruckuswireless | zonedirector_5000_firmware | 10.0.1.0.151 |
| ruckuswireless | zonedirector_5000 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.436%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2020-08-13T00:00:00 |
| Published | 2023-01-20T00:00:00 |
| Last Updated | 2025-04-03T17:45:23 |
Community Chatter & Buzz