PT-2021-20086 · Commscope · Commscope Ruckus Iot Controller

Jim Becher + 1 · Published 2021-05-31 · Updated 2025-04-16 · CVE-2021-33216

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier

Description An issue exists in the CommScope Ruckus IoT Controller, where an undocumented backdoor allows shell access via a developer account. This backdoor enables unauthorized access, potentially leading to further exploitation.

Recommendations For CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier, as a temporary workaround, consider disabling developer account access until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-33216

Affected Products

Commscope Ruckus Iot Controller

References · 7

• 🔥 https://exploit-db.com/exploits/52242 · Exploit
• https://osv.dev/vulnerability/CVE-2021-33216 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33216 · Security Note
• https://t.me/cybersecuritytechnologies/3502 · Telegram Post
• https://korelogic.com/advisories.html · Note
• http://seclists.org/fulldisclosure/2021/May/78 · Note
• https://twitter.com/syedaquib77/status/1912603720644497561 · Twitter Post