Announcement: Security advisory ID-20200205 for IoT Unauthenticated API vulnerability

michael_brado

Greetings,



We’ve created a new Security Bulletin ID-20200205, IoT Controller remote unauthenticated

API execution vulnerability (CVE-2020-8005) on the Support portal Security Bulletins page:



https://support.ruckuswireless.com/security



https://support.ruckuswireless.com/security_bulletins/300



Our IoT 1.5 Software Release posted Jan 27, 2020, has the fix for this vulnerability.   Please

notify your Ruckus IoT customers to upgrade asap.  Thanks and best regards.


FYI...

Ruckus IoT 1.5 (GA) Release Notes:

https://support.ruckuswireless.com/documents/3135-ruckus-iot-1-5-ga-release-notes



Ruckus IoT 1.5 (GA) Controller Software Installation Guide:

https://support.ruckuswireless.com/documents/3134-ruckus-iot-1-5-ga-controller-software-installation-guide



Ruckus IoT 1.5 (GA) Controller Configuration Guide:

https://support.ruckuswireless.com/documents/3136-ruckus-iot-1-5-ga-controller-configuration-guide





Ruckus IoT 1.5 (GA) vRIoT Server Software Release (.ova install image):

https://support.ruckuswireless.com/software/2348-ruckus-iot-1-5-ga-vriot-server-software-release-ova-install-image



Ruckus IoT 1.5 (GA) vRIoT Server Software Release(.tar.gz upgrade image):

https://support.ruckuswireless.com/software/2344-ruckus-iot-1-5-ga-vriot-server-software-release-tar-gz-upgrade-image



Ruckus IoT 1.5 (GA) vRIoT Server Software Release(.qcow2) (KVM install image):

https://support.ruckuswireless.com/software/2349-ruckus-iot-1-5-ga-vriot-server-software-release-qcow2-kvm-install-image



Ruckus IoT 1.5 (GA) vRIoT Server Software Release(.qcow2.tar) (KVM Guest image):

https://support.ruckuswireless.com/software/2350-ruckus-iot-1-5-ga-vriot-server-software-release-qcow2-tar-kvm-guest-image



Ruckus IoT 1.5 (GA) SZ Software Release (.ova) (vSZ-E,vSZ-H install image):

https://support.ruckuswireless.com/software/2347-ruckus-iot-1-5-ga-sz-software-release-ova-vsz-e-vsz-h-install-image

 

Ruckus IoT 1.5 (GA) SZ Software Release (.ximg) (vSZ-E,vSZ-H upgrade image):

https://support.ruckuswireless.com/software/2346-ruckus-iot-1-5-ga-sz-software-release-ximg-vsz-e-vsz-h-upgrade-image 



Ruckus IoT 1.5 (GA) SZ Software Release (.ximg) (SZ-100 upgrade image):

https://support.ruckuswireless.com/software/2345-ruckus-iot-1-5-ga-sz-software-release-ximg-sz-100-upgrade-image