CVE-2020-22653

Think of this bug like a lock on the device that should only accept “official” software updates. The weakness lets an attacker trick that update process so the device accepts an unauthorized firmware image. If that happens, the attacker can effectively take over the device and potentially disrupt your network or keep control even after normal changes.

This matters if you operate any of the listed Ruckus firmware devices (Ruckus R310/R500/R600, Ruckus T300/T301n/T301s, SmartCell Gateway 200 (SCG200), and SmartZone 100/300 and Virtual SmartZone) on the vulnerable firmware versions described. Because the issue can be triggered over the network without authentication or user interaction, it’s most relevant when an attacker can reach the device’s management/update-related network exposure. The practical risk depends on whether the vulnerable functionality is reachable from the network in your environment.

This is RED because the flaw can allow remote unauthorized firmware/image installation, which can lead to full device compromise (not just a minor issue). Even without publicly documented exploit code, there’s sustained security attention and evidence of vulnerability exploitation disclosure involving Ruckus routers, so you should treat this as an active, serious threat. Act immediately to move off the vulnerable firmware versions.