CVE-2021-36630: High severity Ruckuswireless Sz-300 Firmware vulnerability
Published Jan 18, 2023
·Updated
DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.
Affected Software
16 affected components
Ruckuswireless Sz-300 Firmware<=3.6.2
Ruckuswireless Sz-300
Ruckuswireless Sz-144 Firmware<=3.6.2
Ruckuswireless Sz-144
Ruckuswireless Sz-100 Firmware<=3.6.2
Ruckuswireless Sz-100
Ruckuswireless Vsz Firmware<=3.6.2
Ruckuswireless Vsz
All of the following
Ruckuswireless Sz-300 Firmware<=3.6.2
Ruckuswireless Sz-300
All of the following
Ruckuswireless Sz-144 Firmware<=3.6.2
Ruckuswireless Sz-144
All of the following
Ruckuswireless Sz-100 Firmware<=3.6.2
Ruckuswireless Sz-100
All of the following
Ruckuswireless Vsz Firmware<=3.6.2
Ruckuswireless Vsz
Event History
Jan 18, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-36630?
CVE-2021-36630 has a high severity level due to its ability to facilitate DDoS reflection amplification attacks.
2
How do I fix CVE-2021-36630?
To fix CVE-2021-36630, update the affected Ruckus Wireless SmartZone firmware to a version beyond 3.6.2.
3
Which Ruckus Wireless products are affected by CVE-2021-36630?
CVE-2021-36630 affects Ruckus Wireless SZ-300, SZ-144, and SZ-100 firmware versions up to and including 3.6.2.
4
What type of attack can be performed using the CVE-2021-36630 vulnerability?
CVE-2021-36630 allows remote attackers to perform denial of service (DoS) attacks using crafted requests.
5
Can CVE-2021-36630 be exploited remotely?
Yes, CVE-2021-36630 can be exploited remotely by attackers targeting vulnerable systems.