CVE-2020-22658

Imagine the device has a “startup checklist” that’s supposed to ensure only trusted software runs. This bug lets an attacker swap that trusted software with their own before the device starts, so the attacker can effectively take over the device and keep control even after reboots. For a small business, that can mean the network equipment no longer behaves reliably and may be used to attack other systems.

This matters if your small business uses Ruckus networking/security devices running the vulnerable firmware versions listed for Ruckus R310, R500, R600, T300, T301n, T301s, SmartCell Gateway 200 (SCG200), SmartZone SZ-100, SmartZone SZ-300, or Virtual SmartZone (vSZ). The issue is reachable over the network without authentication and without any user action, meaning attackers may not need to “log in” first.

Because exploitation requires the device/feature to be reachable from the attacker’s network path, the risk is highest when those devices are exposed to the internet or an untrusted network segment.

This is RED because exploitation has been reported in the wild, and attackers can manipulate boot to gain full control of affected devices. The attack is also network-based and does not require authentication or user interaction, which increases the chance of opportunistic compromise. Patch as a top priority.