CVE-2020-26879

EPSS 42.5%◆ VulnCheck KEV

Vexday Risk Score

72High priority

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 42.5%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

26 Oct 2020Published on NVD

26 Nov 2020Public PoC

Weaponization speed

30 daysto first PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.

Affected products

n/a · n/a

public PoCs found — 1

vulncheckvulncheck.com/xdb/c21bdb3911aaunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://adepts.of0x.cc https://adepts.of0x.cc/ruckus-vriot-rce/https://support.ruckuswireless.com/documents https://support.ruckuswireless.com/security_bulletins/305 https://twitter.com/TheXC3LL https://x-c3ll.github.io