Ruckus Products Remote Code Execution Vulnerability

Release Date: 18 Nov 2024 1287 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability was identified in Ruckus Products. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

Impact

Remote Code Execution

System / Technologies affected

RUCKUS H350
RUCKUS H550
RUCKUS R350
RUCKUS R350e
RUCKUS R670
RUCKUS T350c
RUCKUS T350d
RUCKUS T350se
RUCKUS T670
Ruckus Q410
Ruckus Q710
Ruckus Q910
Ruckus R550
Ruckus R560
Ruckus R650
Ruckus R750
Ruckus R760
Ruckus R770
Ruckus R850
Ruckus T750
Ruckus T750SE
SmartZone 144 (SZ-144)
SmartZone 144 (SZ-144) - Federal
SmartZone 300 (SZ300)
SmartZone 300 (SZ300) - Federal
Unleashed and Multi-Site Manager

End-of-Life (EOL) Products:

RUCKUS T811-CM (Non-SFP)
RUCKUS T811-CM
Ruckus C110
Ruckus C500
Ruckus E510
Ruckus H320
Ruckus H500
Ruckus H510
Ruckus P300
Ruckus R300
Ruckus R310
Ruckus R320
Ruckus R500
Ruckus R510
Ruckus R600
Ruckus R610
Ruckus R700
Ruckus R710
Ruckus R720
Ruckus R730
Ruckus T300
Ruckus T301n
Ruckus T301s
Ruckus T310c
Ruckus T310d
Ruckus T310n
Ruckus T310s
Ruckus T504
Ruckus T610
Ruckus T710
Ruckus T710s
SmartCell Gateway 200 (SCG200)
SmartZone 100 (SZ-100)
SmartZone 100-D (SZ100-D)
ZoneDirector 1100
ZoneDirector 1200
ZoneDirector 3000

Solutions

Before installation of the software, please visit the vendor's web-site for more details.

Apply fixes issued by the vendor:
- https://support.ruckuswireless.com/security_bulletins/326

Note: All end-of-life products do not receive security fixes.

Vulnerability Identifier

Note: No CVE information is available for this vulnerability

Source

https://support.ruckuswireless.com/security_bulletins/326