Remote Code Execution Vulnerability in Ruckus Wireless Products

CVE-2020-22662

Summary

A security vulnerability in various Ruckus Wireless products allows attackers to exploit remote code execution capabilities. By leveraging this flaw, an attacker can modify and set unauthorized 'illegal region code' through command injection via the web interface. This manipulation not only permits the execution of illegal frequency operations but also enables the creation of multiple SSID WLAN interfaces per radio, exceeding the usual limit and potentially causing significant network interference. Moreover, the attacker is capable of unlocking hidden regions, posing a severe risk to network security.

References