CVE-2021-36630

Katalog CVE

CVSS 7.5 · High EPSS 2,2%

Kerentanan Allocation of Resources Without Limits or Throttling pada ruckuswireless sz-300 firmware, ruckuswireless sz-144 firmware +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.

Rincian

Terbit di NVD

18 Januari 2023

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdf advisory vendor
• https://anquan.baidu.com/article/1434 exploit · mitigasi · deskripsi teknis · advisory pihak ketiga
• https://github.com/lixiang957/CVE-2021-36630 exploit · advisory pihak ketiga
• https://www.freebuf.com/articles/web/260338.html exploit · advisory pihak ketiga