Ruckus Wireless C110 up to 200.7.10.102.92 webs HTTP Request out-of-bounds write

Summaryinfo

A vulnerability was found in Ruckus Wireless C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710 and T710s up to 200.7.10.102.92. It has been declared as critical. Impacted is an unknown function of the component webs. Such manipulation as part of HTTP Request leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2020-13916. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Ruckus Wireless C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710 and T710s up to 200.7.10.102.92. Affected by this issue is some unknown processing of the component webs. The manipulation as part of a HTTP Request leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.

The weakness was disclosed 07/28/2020 (Website). The advisory is shared for download at support.ruckuswireless.com. This vulnerability is handled as CVE-2020-13916 since 06/07/2020. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 07/28/2020).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-159029, VDB-159030, VDB-159031 and VDB-159033 are pretty similar. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Ruckus Wireless

Name

• C110
• E510
• H320
• H510
• M510
• R310
• R320
• R500
• R510 R600
• R610
• R710
• R720
• R750
• T300
• T301n
• T301s
• T310c
• T310d
• T310n
• T310s
• T610
• T710
• T710s

Version

• 200.7.10.102.0
• 200.7.10.102.1
• 200.7.10.102.2
• 200.7.10.102.3
• 200.7.10.102.4
• 200.7.10.102.5
• 200.7.10.102.6
• 200.7.10.102.7
• 200.7.10.102.8
• 200.7.10.102.9
• 200.7.10.102.10
• 200.7.10.102.11
• 200.7.10.102.12
• 200.7.10.102.13
• 200.7.10.102.14
• 200.7.10.102.15
• 200.7.10.102.16
• 200.7.10.102.17
• 200.7.10.102.18
• 200.7.10.102.19
• 200.7.10.102.20
• 200.7.10.102.21
• 200.7.10.102.22
• 200.7.10.102.23
• 200.7.10.102.24
• 200.7.10.102.25
• 200.7.10.102.26
• 200.7.10.102.27
• 200.7.10.102.28
• 200.7.10.102.29
• 200.7.10.102.30
• 200.7.10.102.31
• 200.7.10.102.32
• 200.7.10.102.33
• 200.7.10.102.34
• 200.7.10.102.35
• 200.7.10.102.36
• 200.7.10.102.37
• 200.7.10.102.38
• 200.7.10.102.39
• 200.7.10.102.40
• 200.7.10.102.41
• 200.7.10.102.42
• 200.7.10.102.43
• 200.7.10.102.44
• 200.7.10.102.45
• 200.7.10.102.46
• 200.7.10.102.47
• 200.7.10.102.48
• 200.7.10.102.49
• 200.7.10.102.50
• 200.7.10.102.51
• 200.7.10.102.52
• 200.7.10.102.53
• 200.7.10.102.54
• 200.7.10.102.55
• 200.7.10.102.56
• 200.7.10.102.57
• 200.7.10.102.58
• 200.7.10.102.59
• 200.7.10.102.60
• 200.7.10.102.61
• 200.7.10.102.62
• 200.7.10.102.63
• 200.7.10.102.64
• 200.7.10.102.65
• 200.7.10.102.66
• 200.7.10.102.67
• 200.7.10.102.68
• 200.7.10.102.69
• 200.7.10.102.70
• 200.7.10.102.71
• 200.7.10.102.72
• 200.7.10.102.73
• 200.7.10.102.74
• 200.7.10.102.75
• 200.7.10.102.76
• 200.7.10.102.77
• 200.7.10.102.78
• 200.7.10.102.79
• 200.7.10.102.80
• 200.7.10.102.81
• 200.7.10.102.82
• 200.7.10.102.83
• 200.7.10.102.84
• 200.7.10.102.85
• 200.7.10.102.86
• 200.7.10.102.87
• 200.7.10.102.88
• 200.7.10.102.89
• 200.7.10.102.90
• 200.7.10.102.91
• 200.7.10.102.92

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion