CommScope Ruckus IoT Controller: The Undocumented Account Comedy of Errors
Attention all IoT enthusiasts and accidental hackers! CommScope Ruckus IoT Controller version 1.7.1.0 has an undocumented account with more mystery than a detective novel. Fortunately, an updated firmware saves the day. So, if you’re running this version, it’s time to upgrade faster than a cat chasing a laser pointer!
Hot Take:
Who knew the Internet of Things came with a side of secret sauce? CommScope’s Ruckus IoT Controller serves up an undocumented account like a surprise ingredient in your security sandwich. Time to upgrade your firmware, folks, before someone else upgrades your access.
Key Points:
- An undocumented ‘upgrade’ account was found in CommScope’s Ruckus IoT Controller.
- This account allows access through Secure Copy (SCP) with hard-coded credentials.
- The vulnerability is associated with several CVEs, including CVE-2021-33216.
- CommScope released a patched firmware (version 1.8.0.0) to resolve the issue.
- Discovery credited to Jim Becher of KoreLogic, with a public disclosure timeline.
Already a member? Log in here