^{CVE-2020-22657:}Authentication Bypass Vulnerability in Ruckus Wireless Devices

Overview

This vulnerability (CVE-2020-22657) allows an attacker to completely bypass authentication mechanisms on the web management interface of affected Ruckus devices. By exploiting this vulnerability, an attacker could gain unauthorized administrative access to the device without providing valid credentials. This could lead to complete compromise of the affected device, including the ability to modify configurations, access sensitive information, and potentially use the device as a pivot point to attack other network resources. The vulnerability affects a wide range of Ruckus wireless access points and management controllers running vulnerable firmware versions.

Remediation

1. Update all affected devices to the latest firmware versions:

   • SmartCell Gateway 200 (SCG200): Update to version 3.6.2.0.795 or later
   • SmartZone 100 (SZ-100): Update to version 3.6.2.0.795 or later
   • SmartZone 300 (SZ300): Update to version 3.6.2.0.795 or later
   • Virtual SmartZone (vSZ): Update to version 3.6.2.0.795 or later
   • For access points (R310, R500, R600, T300, T301n, T301s), follow Ruckus security advisories for appropriate firmware updates

2. Until updates can be applied, consider implementing the following mitigations:

   • Restrict management access to trusted IP addresses only
   • Place affected devices behind a firewall that limits access to the web interface
   • Use VPN for remote management access
   • Monitor for unauthorized access attempts

3. After updating, perform a security audit to ensure no unauthorized changes were made to device configurations.

References

1. Ruckus Security Bulletin: https://support.ruckuswireless.com/security_bulletins/302
2. Vulnerability Analysis: https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
3. CWE-287: Improper Authentication: https://cwe.mitre.org/data/definitions/287.html