CVE-2021-36630

HighCVSS 7.5/10Last modified Jul 9, 2026

Description

DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote attackers to perform DOS attacks via crafted request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://anquan.baidu.com/article/1434Exploit, Mitigation, Technical Description, Third Party Advisory
https://github.com/lixiang957/CVE-2021-36630Exploit, Third Party Advisory
https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdfVendor Advisory
https://www.freebuf.com/articles/web/260338.htmlExploit, Third Party Advisory
https://anquan.baidu.com/article/1434Exploit, Mitigation, Technical Description, Third Party Advisory
https://github.com/lixiang957/CVE-2021-36630Exploit, Third Party Advisory
https://www.commscope.com/globalassets/digizuite/921070-faq-security-advisory-id-20210719-v1-0.pdfVendor Advisory
https://www.freebuf.com/articles/web/260338.htmlExploit, Third Party Advisory

Timeline

Published: Jan 18, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-366316.7Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL i CVE-2021-36645.3url-parse is vulnerable to URL Redirection to Untrusted Site CVE-2021-366466.1A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.CVE-2021-366474.7Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before CVE-2021-366545.4CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.CVE-2021-36669.8body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')CVE-2021-366657.8An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.CVE-2021-366667.8An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.CVE-2021-366677.8Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the l CVE-2021-366687.8URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron CVE-2021-36676.5An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath f CVE-2021-366865.4Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.