CVEs-PoC/2020/CVE-2020-26879.md

### [CVE-2020-26879](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26879)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.

### POC

#### Reference
- https://adepts.of0x.cc
- https://adepts.of0x.cc/ruckus-vriot-rce/
- https://support.ruckuswireless.com/documents
- https://x-c3ll.github.io

#### Github
- https://github.com/alphaSeclab/sec-daily-2020