CVE-2020-26879: Critical severity commscope ruckus vriot vulnerability
Published Oct 26, 2020
·Updated
Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validatetoken.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.
Affected Software
2 affected components
CommScope Ruckus Vriot<=1.5.1.0.21
CommScope Ruckus Iot Module
Event History
Oct 26, 2020
CVE Published
via MITRE·07:20 PM
Data Sourced
via MITRE·07:20 PM
Description
Frequently Asked Questions
1
What is CVE-2020-26879?
CVE-2020-26879 is a vulnerability in Ruckus vRioT through 1.5.1.0.21 that allows unauthenticated attackers to interact with the service API using a backdoor value as the Authorization header.
2
How severe is CVE-2020-26879?
CVE-2020-26879 has a severity rating of 9.8 (Critical).
3
How can an attacker exploit CVE-2020-26879?
An attacker can exploit CVE-2020-26879 by sending requests to the service API with a backdoor value as the Authorization header.
4
What is the affected software for CVE-2020-26879?
The affected software for CVE-2020-26879 is Ruckus vRioT version 1.5.1.0.21.
5
Is Commscope Ruckus Iot Module affected by CVE-2020-26879?
No, Commscope Ruckus Iot Module is not affected by CVE-2020-26879.