漏洞描述
Ruckus vRioT through 1.5.1.0.21 contains an API backdoor caused by a hardcoded token in validate_token.py,letting unauthenticated attackers interact with the API without authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
x-c3ll.github.iohttps://x-c3ll.github.io↗support.ruckuswireless.comhttps://support.ruckuswireless.com/security_bulletins/305↗twitter.comhttps://twitter.com/TheXC3LL↗adepts.of0x.cchttps://adepts.of0x.cc/ruckus-vriot-rce/↗adepts.of0x.cchttps://adepts.of0x.cc↗support.ruckuswireless.comhttps://support.ruckuswireless.com/documents↗