CVE-2020-22662 Details
Description
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to change and set unauthorized "illegal region code" by remote code Execution command injection which leads to run illegal frequency with maxi output power. Vulnerability allows attacker to create an arbitrary amount of ssid wlans interface per radio which creates overhead over noise (the default max limit is 8 ssid only per radio in solo AP). Vulnerability allows attacker to unlock hidden regions by privilege command injection in WEB GUI.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 3, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.ruckuswireless.com/security_bulletins/302 | CVE | PatchVendor Advisory |
| https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1 | [email protected] | |
| https://support.ruckuswireless.com/security_bulletins/302 | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| ruckuswireless r310 firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless r310 | All versions |
CPE
Remediation
| |
| ruckuswireless r500 firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless r500 | All versions |
CPE
Remediation
| |
| ruckuswireless r600 firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless r600 | All versions |
CPE
Remediation
| |
| ruckuswireless t300 firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless t300 | All versions |
CPE
Remediation
| |
| ruckuswireless t301n firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless t301n | All versions |
CPE
Remediation
| |
| ruckuswireless t301s firmware | 10.5.1.0.199 |
CPE
Remediation
| |
| ruckuswireless t301s | All versions |
CPE
Remediation
| |
| ruckuswireless scg200 firmware | < 3.6.2.0.795 |
CPE
Remediation
| |
| ruckuswireless scg200 | All versions |
CPE
Remediation
| |
| ruckuswireless sz-100 firmware | < 3.6.2.0.795 |
CPE
Remediation
| |
| ruckuswireless sz-100 | All versions |
CPE
Remediation
| |
| ruckuswireless sz-300 firmware | < 3.6.2.0.795 |
CPE
Remediation
| |
| ruckuswireless sz-300 | All versions |
CPE
Remediation
| |
| ruckuswireless vsz firmware | < 3.6.2.0.795 |
CPE
Remediation
| |
| ruckuswireless vsz | All versions |
CPE
Remediation
| |
| ruckuswireless zonedirector 1100 firmware | 9.10.2.0.130 |
CPE
Remediation
| |
| ruckuswireless zonedirector 1100 | All versions |
CPE
Remediation
| |
| ruckuswireless zonedirector 1200 firmware | 10.2.1.0.218 |
CPE
Remediation
| |
| ruckuswireless zonedirector 1200 | All versions |
CPE
Remediation
| |
| ruckuswireless zonedirector 3000 firmware | 10.2.1.0.218 |
CPE
Remediation
| |
| ruckuswireless zonedirector 3000 | All versions |
CPE
Remediation
| |
| ruckuswireless zonedirector 5000 firmware | 10.0.1.0.151 |
CPE
Remediation
| |
| ruckuswireless zonedirector 5000 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 3, 2025 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| Aug 6, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 1, 2023 | Initial Analysis | [email protected] |