Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
BID:60213
Info
Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
| Bugtraq ID: | 60213 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 27 2013 12:00AM |
| Updated: | May 27 2013 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
RUCKUS WIRELESS ZoneFlex 9.5 RUCKUS WIRELESS ZoneFlex 9.4 RUCKUS WIRELESS ZoneFlex 9.3 RUCKUS WIRELESS ZoneFlex 9.2 RUCKUS WIRELESS ZoneFlex 1.1 RUCKUS WIRELESS ZoneDirector 9.5 RUCKUS WIRELESS ZoneDirector 9.4 RUCKUS WIRELESS ZoneDirector 9.3 RUCKUS WIRELESS ZoneDirector 9.2 RUCKUS WIRELESS SmartCell Access Points 1.1 |
| Not Vulnerable: |
RUCKUS WIRELESS ZoneFlex 9.5.1 0.50 RUCKUS WIRELESS ZoneFlex 9.4.3 0.16 RUCKUS WIRELESS ZoneFlex 9.3.4 0.17 RUCKUS WIRELESS ZoneFlex 1.1.1 RUCKUS WIRELESS ZoneFlex ZF7731_9.2.0.0.168 RUCKUS WIRELESS ZoneDirector 9.5.1 0.50 RUCKUS WIRELESS ZoneDirector 9.4.3 0.16 RUCKUS WIRELESS ZoneDirector 9.3.4 0.17 RUCKUS WIRELESS ZoneDirector ZF7731_9.2.0.0.168 RUCKUS WIRELESS SmartCell Access Points 1.1.1 |
Discussion
Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
Multiple RUCKUS WIRELESS products are prone to an authentication-bypass vulnerability.
Remote attackers can exploit this issue to gain unauthorized access and perform arbitrary actions.
The following products are affected:
RUCKUS WIRELESS ZoneDirector 9.2.x, 9.3.x, 9.4.x and 9.5.x
RUCKUS WIRELESS ZoneFlex 9.2.x, 9.3.x, 9.4.x, 9.5.x and 1.x.x
RUCKUS WIRELESS SmartCell Access Points 1.x.x
Multiple RUCKUS WIRELESS products are prone to an authentication-bypass vulnerability.
Remote attackers can exploit this issue to gain unauthorized access and perform arbitrary actions.
The following products are affected:
RUCKUS WIRELESS ZoneDirector 9.2.x, 9.3.x, 9.4.x and 9.5.x
RUCKUS WIRELESS ZoneFlex 9.2.x, 9.3.x, 9.4.x, 9.5.x and 1.x.x
RUCKUS WIRELESS SmartCell Access Points 1.x.x
Exploit / POC
Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple RUCKUS WIRELESS Products Authentication Bypass Vulnerability
References:
References:
- RUCKUS WIRELESS Homepage (RUCKUS WIRELESS)
- RUCKUS ADVISORY ID 031813-1: Unauthenticated TCP tunneling on Ruckus devices via (RUCKUS WIRELESS)