CVE-2020-22658

nvd.nist.gov • July 8, 2026

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to switch completely to unauthorized image to be Boot as primary verified image.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Ruckus Systems Exploited via Unauthorized Image Injection Two critical vulnerabilities, CVE-2020-22653 and CVE-2020-22658, were identified in Ruckus networking devices, including models R310, R500, R600, T300, and T301. Both vulnerabilities allow attackers to exploit the official image signature, enabling unauthorized image injection. CVE-2020-22653 permits attackers to force injection of an unauthorized image signature, while CVE-2020-22658 allows switching to an unauthorized image as the primary verified image. These vulnerabilities affect multiple versions of Ruckus software, with the latest updates being 10.5.1.0.199 for hardware and 3.6.2.0.795 for software. The vulnerabilities were published on January 20, 2023, and have been updated as of July 7, 2026. Organizations using affected Ruckus products are advised to apply patches to mitigate risks. 71

Extracted Entities

CVE-2020-22658

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (14)