CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2020-22657
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to perform WEB GUI login authentication bypass.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ruckuswireless:r310_firmware
- ruckuswireless:r500_firmware
- ruckuswireless:r600_firmware
- ruckuswireless:scg200_firmware
- ruckuswireless:sz-100_firmware
- ruckuswireless:sz-300_firmware
- ruckuswireless:t300_firmware
- ruckuswireless:t301n_firmware
- ruckuswireless:t301s_firmware
- ruckuswireless:vsz_firmware
- ruckuswireless:zonedirector_1100_firmware
- ruckuswireless:zonedirector_1200_firmware
- ruckuswireless:zonedirector_3000_firmware
- ruckuswireless:zonedirector_5000_firmware