CVE Feed

    Dashboard / CVE / CVE-2020-22659

    CVE-2020-22659

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.

    Published:Jan 20, 2023
    Last Modified:Apr 3, 2025
    EPS:Jan 20, 2023
    EPSS Score:0.00059
    CVSS Score:7.5

    Affected Products

    Vendor
    Ruckuswireless
    Product
    R310
    Vendor
    Ruckuswireless
    Product
    R310 Firmware
    Vendor
    Ruckuswireless
    Product
    R500
    Vendor
    Ruckuswireless
    Product
    R500 Firmware
    Vendor
    Ruckuswireless
    Product
    R600
    Vendor
    Ruckuswireless
    Product
    R600 Firmware
    Vendor
    Ruckuswireless
    Product
    Scg200
    Vendor
    Ruckuswireless
    Product
    Scg200 Firmware
    Vendor
    Ruckuswireless
    Product
    Sz-100
    Vendor
    Ruckuswireless
    Product
    Sz-100 Firmware
    Vendor
    Ruckuswireless
    Product
    Sz-300
    Vendor
    Ruckuswireless
    Product
    Sz-300 Firmware
    Vendor
    Ruckuswireless
    Product
    T300
    Vendor
    Ruckuswireless
    Product
    T300 Firmware
    Vendor
    Ruckuswireless
    Product
    T301n
    Vendor
    Ruckuswireless
    Product
    T301n Firmware
    Vendor
    Ruckuswireless
    Product
    T301s
    Vendor
    Ruckuswireless
    Product
    T301s Firmware
    Vendor
    Ruckuswireless
    Product
    Vsz
    Vendor
    Ruckuswireless
    Product
    Vsz Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1100
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1100 Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200
    Vendor
    Ruckuswireless
    Product
    Zonedirector 1200 Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 3000
    Vendor
    Ruckuswireless
    Product
    Zonedirector 3000 Firmware
    Vendor
    Ruckuswireless
    Product
    Zonedirector 5000
    Vendor
    Ruckuswireless
    Product
    Zonedirector 5000 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2023-49225 (CVSS 6.1) — A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP S…
    CVE-2023-25717 (CVSS 9.8) — Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as de…
    CVE-2020-22662 (CVSS 7.5) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22657 (CVSS 9.1) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22660 (CVSS 7.5) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22661 (CVSS 6.5) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22655 (CVSS 7.5) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22654 (CVSS 9.8) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22656 (CVSS 7.5) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…
    CVE-2020-22653 (CVSS 9.8) — In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruc…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High