CVE-2020-22653: Ruckus Wireless r310 Firmware
Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature.
Affected products
- Ruckus Wireless r310 Firmware: version 10.5.1.0.199 only
- Ruckus Wireless r500 Firmware: version 10.5.1.0.199 only
- Ruckus Wireless r600 Firmware: version 10.5.1.0.199 only
- Ruckus Wireless SCG200 Firmware: before 3.6.2.0.795 (fixed in 3.6.2.0.795)
- Ruckus Wireless Sz-100 Firmware: before 3.6.2.0.795 (fixed in 3.6.2.0.795)
- Ruckus Wireless Sz-300 Firmware: before 3.6.2.0.795 (fixed in 3.6.2.0.795)
- Ruckus Wireless t300 Firmware: version 10.5.1.0.199 only
- Ruckus Wireless t301n Firmware: version 10.5.1.0.199 only
- Ruckus Wireless t301s Firmware: version 10.5.1.0.199 only
- Ruckus Wireless Vsz Firmware: before 3.6.2.0.795 (fixed in 3.6.2.0.795)
- Ruckus Wireless Zonedirector 1100 Firmware: version 9.10.2.0.130 only
- Ruckus Wireless Zonedirector 1200 Firmware: version 10.2.1.0.218 only
- Ruckus Wireless Zonedirector 3000 Firmware: version 10.2.1.0.218 only
- Ruckus Wireless Zonedirector 5000 Firmware: version 10.0.1.0.151 only
Published 2023-01-20. Last modified 2026-06-17.