Security Bulletins

Security Bulletin 20230404

Title: CVE-2022-47522: Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues Description: On March 28, 2023, the research paper “Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues” by Domien Schepers, Aanjhan Ranganathan, and Mathy Vanhoef was published. This paper disclosed a vulnerability in the 802.11 standard, which allows an authenticated attacker to spoof a targeted wireless client and redirect frames in the transmit queue of a vulnerable access point to the attacker’s device.
Release Date:
April 04, 2023
Edit Date:
April 05, 2023
Version:
1.0

Applicable To The Following Products

RUCKUS R350

The RUCKUS R350 represents an evolution in Access Point (AP) technology - it's not just a Wi-Fi AP, it's a Wireless Technology Hub.  It's a 4 stream AP (2x2:2 in 2.4Ghz, 2x2:2 in 5GHz) that comes with Wi-Fi 6 (802.11ax) capable of delivering 1200Mbps in 5GHz and 574Mbps in 2.4GHz. Additionally, the USB port allows expansion for any future IoT protocol, all without breaking the bank.

Ruckus R300

The Ruckus R300 is an entry-level indoor Access Point offering best in class performance. The R300 features dual 802.11n radios (2.4 and 5 GHz) in a 2x2:2 MIMO configuration, yielding up to 600 Mbps of physical layer throughput. A single Gigabit Ethernet port and can be powered via 802.3af PoE or by a separate
12VDC power accessory. The R300 sports a low-profile, minimalist industrial design and is extremely compact in size, measuring 13 x 13 x 2.8 cm (5.1 x.5.1 x 1.1 inches).

Ruckus R310

The ZoneFlex R310 is the industry’s lowest cost enterprise class 802.11ac access point. The R310 has dual radios (2.4GHz & 5GHz) which are capable of concurrent operation. It is a 2x2:2 stream access point, offering up to 867Mbps of physical layer throughput in the 802.11 a/n/ac 5GHz range, with an additional 300Mbps physical layer throughput in the 802.11 b/g/n 2.4 GHz range. It has a single Gigabit Ethernet port and can be powered by 802.3af PoE or a 12V DC power supply. The R310 has a compact form factor (13.8cm x 13.5cm x 3.3cm) is extremely helpful in easy installation, and enables the power of 802.11ac literally in the palm of your hand.

It is perfect for low client density deployments such as coffee shops, convenience stores and other brick & mortar establishments, where cutting edge WiFi is necessary, but there is only a lean IT staff to manage the network. The R310 is a perfect entry level enterprise class 802.11ac access point that delivers maximum value at minimal cost.

Ruckus R320

The R320 is an Indoor 2x2:2 802.11ac Wave2 (MU-MIMO-capable) Wi-Fi access point.

The Ruckus R320 delivers consistent, reliable 802.11ac Wave 2 dual-band wireless networking at an affordable price, and offers up to 867Mbps throughput on 802.11a/n/ac 5GHz, and up to 300Mpbs throughput in 802.11b/g/n 2.4GHz range. It has a single Gigabit Ethernet port and can be powered by 802.3af PoE or 12V DC power supply.

The R320 features the patented Ruckus performance optimization and interference mitigation technologies found in our premier access points, to deliver superior user experiences at extended ranges. But it provides them in an ultra-compact form factor built for small and midsize businesses and low to mid-density hotspot environments.


Ruckus R500

The ZoneFlex R500 is the industry’s best-performing 2x2 802.11ac indoor WLAN access point, combining Ruckus-patented RF technologies with the new IEEE 802.11ac standard to provide outstanding WiFi performance.

The R500 features dual radios, capable of concurrent operation.  It features a 5 GHz 802.11a/n/ac radio in a 2x2:2 spatial stream configuration, capable of physical layer rates of up to 867 Mbps. A 2.4GHz 802.11b/g/n radio in a 2x2:2 spatial stream configuration offers an additional 300 Mbps of physical layer throughput. Ruckus’ ZoneFlex R500 is an ideal access point for medium client density enterprise and hotspot environments including SMBs, schools, hotels, branch offices and retail outlets.

Ruckus R510

The ZoneFlex R510 brings cutting edge 802.11ac Wave 2 to the mid-tier segment.  It improves aggregate network throughput and benefits both Wave 2 & non-Wave 2 clients.   It combines Ruckus patented technologies and best-in-class design with the next generation of 802.11ac features to deliver outstanding Wi-Fi performance and reliability.  It future proofs the customer for emerging Internet of Things (IoT) technologies.

With throughput capacities of 300Mbps (2.4GHz) and 867 Mbps (5GHz), the ZoneFlex R510 brings cutting edge Wave 2 technology for the mid-tier segment.  802.11ac Multi-User MIMO (MU-MIMO) support allows the R510 to simultaneously transmit to multiple client devices, drastically improving airtime efficiency, overall throughput, and availability.

ZoneFlex R510 is purpose-built for medium density, high performance and interference-laden environments such as schools, universities, small-medium businesses, hotels, MDUs and conference centers.

Ruckus R550

The Ruckus R550 represents an evolution in Access Point (AP) technology - it's not just a Wi-Fi AP, it's a Wireless Technology Hub.  It's a 4 stream AP (2x2:2 in 2.4Ghz, 2x2:2 in 5GHz) that comes with Wi-Fi 6 (802.11ax) capable of delivering 1200Mbps in 5GHz and 574Mbps in 2.4GHz.  The Ruckus R550 also comes with built-in BLE & Zigbee, and the option to expand to other IoT wireless protocols in the future.

Ruckus R560

The RUCKUS R560 is our mid-range tri-band concurrent Wi-Fi 6E indoor AP that supports 6 spatial streams (2x2:2 concurrent in 2.4GHz, 5GHz, and 6GHz).

The RUCKUS R560, with OFDMA and MU-MIMO capabilities, efficiently manages up to 1536 client connections and is designed to address the needs of high throughput indoor locations such as hotel/MDU hallways, student housing, and classrooms. It includes a 5Gbps multi-gigabit Ethernet port to mitigate backhaul capacity bottlenecks.

Additionally, the R560 has an onboard IoT selectable radio and supports wireless standards beyond Wi-Fi in combination with the Ruckus IoT Suite.

Ruckus R600

The ZoneFlex R600 is a 3x3 802.11ac WLAN access point featuring performance-enhancing, Ruckus-patented RF technologies available at a compelling price point.  The R600 is ideal for medium- to high-density mobile device wireless networks. It is a power-efficient access point, capable of operating with full functionality on standard (802.3af) PoE.  This keeps total cost of ownership of the R600 low by eliminating the need to upgrade to more expensive PoE+ switch infrastructure.  The R600 features dual radios, capable of concurrent operation.  It features a 5 GHz802.11a/n/ac radio in a 3x3:3 spatial stream configuration, capable of physical layer rates of up to 1300 Mbps. A 2.4 GHz 802.11b/g/n radio in a 3x3:3 spatial stream configuration offers an additional 450 Mbps of physical layer throughput.

Ruckus R610

The ZoneFlex R610 delivers blazing performance, with data rates up to 1900 Mbps and the density-handling ability to match.  Patented BeamFlex+ technology rejects interference and improves signal quality for any device, anywhere.  Included MU-MIMO technology maximizes network efficiency, reducing bottlenecks and enhancing user experience.
The R610 is a great fit for deployments in high-density enviornments in which dozens of clients need guaranteed high throughput.  K-12 schools offering online digital learning with 30+ kids per classroom and university lecture halls serving concurrent HD video streams to hundreds of student devices are perfect use cases for the r610.
The R610 can be used with any Ruckus control and management platform - appliance, virtual or cloud-managed.  That means that as your business needs change, your architecture - and your APs - can change with you.

Ruckus R650

The Ruckus R650 represents an evolution in Access Point (AP) technology - it's not just a Wi-Fi AP, it's a Wireless technology hub. It's a 6 stream AP (4x4:4 in 5GHz, 2x2:2 in 2.4GHz) that comes with Wi-Fi 6 (802.11ax) capable of delivering 2400Mbps in 5GHz and 574Mbps in 2.4GHz.

Wi-Fi 6 Multi-gigabit wireless technology is custom designed for ultra-high density deployments using technologies like OFDMA and has the added benefit of increasing your phone's battery life, thanks to the Target Wake Time (TWT) feature.

Additionally, the R650 comes with built-in BLE and Zigbee, and the option to expand to other wireless protocols in the future. With the R650, adopting a new wireless technology is as if it's a wireless language, the R650 will be able to speak it.

Ruckus R700

The Ruckus R700 ensures the most reliable connectivity within challenging and ever-changing RF environments. With BeamFlex+, the Ruckus R700 is capable of delivering 6 dB of signal-to-interference-plus-noise (SINR) improvement and up to 15 dB of interference mitigation over other APs. The R700 simultaneously supports spatial multiplexing and BeamFlex+ to deliver the best price/performance of any three-stream 802.11ac AP.

Ruckus R710

The ZoneFlex R710 is industry’s highest performance 802.11ac Wave 2 access point.  It combines Ruckus patented technologies and best-in-class design with the next generation of 802.11ac features to deliver outstanding Wi-Fi performance and reliability.

With throughput capacities of 800 Mbps (2.4GHz) and 1733 Mbps (5GHz), the ZoneFlex R710 supports the highest available throughput for Wi-Fi clients. 802.11ac Multi-User MIMO (MU-MIMO) support allows the R710 to simultaneously transmit tomultiple client devices, drastically improving airtime efficiency, overall throughput, and availability. 

ZoneFlex R710 is purpose-built for high-capacity, high performance and interference-laden environments such as schools, universities, public venues, hotels, and conference centers.

Ruckus R720

The ZoneFlex R720 is a new dual-band concurrent 4x4 802.11ac Wave 2 Access Point capable of 160 MHz and 80+80 MHz channelization, designed for high density indoor applications.  The R720 features one 10/100/1000 Etherenet port, and one 100/1000/2500 Ethernet port that supports 802.3af and 802.3at Power Over Ethernet (PoE), and a USB port for IoT applications.


Ruckus R730

The Ruckus R730 is a new dual-band concurrent 12 stream 802.11ax-Ready Access Point, capable of delivering 4.8Gbps with 8x8:8 5GHz radio and 1.148Gbps with a 2.4GHz radio. 

The R730 is designed for high density, high performance applications, and has on-board BLE & Zigbee radios for IOT Applications.  The R730 supports a 5Gbps PoE_in Ethernet interface that can operate with uPOE, PoH, and 802.3at power, and has an additional 1Gbps Ethernet interface and a USB port.  

Ruckus R750

The Ruckus R750 represents an evolution in Access Point (AP) technology - it's not just a Wi-Fi AP, it's a Wireless technology hub. It's an 8 stream AP (4x4:4 in 5GHz, 4x4:4 in 2.4GHz) that comes with Wi-Fi 6 (802.11ax) capable of delivering 2.4Gbps in 5GHz and 1.148Gbps in 2.4GHz.

Wi-Fi 6 Multi-gigabit wireless technology is custom designed for ultra-high density deployments using technologies like OFDMA and has the added benefit of increasing your phone's battery life, thanks to the Target Wait Time (TWT) feature.

Additionally, the R750 comes with built-in BLE & Zigbee, and the option to expand to other wireless protocols in the future. With the R750, adopting a new wireless technology is as if it's a wireless language, the R750 will be able to speak it.

Ruckus R760

The RUCKUS R760 is our highest capacity tri-band, tri-concurrent Wi-Fi 6E access point (AP) that supports 12 spatial streams (4x4:4 in 6GHz, 4x4:4 in 5GHz, 4x4:4 in 2.4GHz). 


The R760, with OFDMA, TWT and MU-MIMO capabilities, efficiently manages up to 1536 client connections with increased capacity, improved coverage and performance in ultra-high dense environments. Furthermore, a 10 Gbps multi-gigabit Ethernet port mitigates backhaul capacity bottlenecks.


Additionally, the R760 is IoT ready and supports wireless standards beyond Wi-Fi in combination with the RUCKUS IoT Suite


Ruckus R850

The Ruckus R850 is a new dual-band concurrent 12 stream Wi-Fi 6 Access Point, capable of delivering 4.8Gbps with 8x8:8 5GHz radio and 1.148Gbps with a 2.4GHz radio. 

The R850 is designed for high density, high performance applications, and has on-board BLE & Zigbee radios for IOT Applications.  The R850 supports a 5Gbps PoE_in Ethernet interface that can operate with uPOE, PoH, and 802.3at power, and has an additional 1Gbps Ethernet interface and a USB port.

SmartZone 100 (SZ-100)

SmartZone™ 100 (SZ-100) is the most scalable, resilient, and highest performing Wireless LAN controller within the Ruckus family of WLAN controllers for enterprises around the world. It manages up to 1,024 ZoneFlex Smart Wi-Fi access points, 2,000 WLANs, and 25,000 clients per device. Its unique SmartZone architecture allows the SZ-100 to be deployed in a 3+1 Active-Active cluster. With Active-Active clustering all members (up to 4) of a cluster will actively manage APs in the network, providing enhanced resiliency for high availability requirements. With clustering, the SZ-100 can manage up to 3,000 APs and 60,000 clients.

Smart licensing allows customers to manage all licensing needs online at https://support.ruckuswireless.com. With Smart licensing, customers have the ability to buy and assign licenses at a granular level down to 1 (one) AP license.

SmartZone 100-D (SZ100-D)

The SmartZone™ Data Plane appliance (SZ100-D) is a wireless LAN data plane appliance, that comes in physical form factor as a family of two products, first with 1Gbps and second with 10Gbps throughput support. Made to work seamlessly with Ruckus SmartZone network controllers, the SmartZone Data Plane appliance enables secure tunneled WLANs from Ruckus APs while minimizing CAPEX spending and maximizing Wi-Fi deployment flexibility and scale.

SZ100-D appliance benefits businesses that have leaner IT departments with limited virtualization expertise or that wish to further simplify deployments. Operators, ISPs and large enterprises can deploy the SZ100-D in a centralized data center with SmartZone network controllers, or at specific venues in a distributed topology. In addition, organizations have the flexibility to deploy SZ100-D at each of the tenant locations based on their requirements.

The Data Plane appliance brings multiple high value features, such as:

  - High performance DHCP-server

  - NAT (Network Address Translation)

  - L3 Roaming

  - Flexi-VPN


SmartZone 144 (SZ-144)

SmartZone™ 144 (SZ-144) is the next-generation high performing Wireless LAN controller within the Ruckus family of WLAN controllers for enterprises around the world. It manages up to 2000 Commscope Wi-Fi access points, 400 switches,and 40,000 clients per controller. Its unique SmartZone architecture allows the SZ-144 to be deployed in a 3+1 Active-Active cluster. With Active-Active clustering all members (up to 4) of a cluster will actively manage APs and switches in the network, providing enhanced resiliency for high availability requirements. With clustering, the SZ-144 can manage up to 6,000APs, 1200 switches and 120,000 clients.

Smart licensing allows customers to manage all licensing needs online at https://support.ruckuswireless.com. With Smart licensing, customers have the ability to buy and assign licenses ata granular level down to 1 (one) AP license.

SmartZone 144 (SZ-144) - Federal

SmartZone™ 144 (SZ-144) is the next-generation high performing Wireless LAN controller within the Ruckus family of WLAN controllers for enterprises around the world. It manages up to 2000 Commscope Wi-Fi access points, 400 switches,and 40,000 clients per controller. Its unique SmartZone architecture allows the SZ-144 to be deployed in a 3+1 Active-Active cluster. With Active-Active clustering all members (up to 4) of a cluster will actively manage APs and switches in the network, providing enhanced resiliency for high availability requirements. With clustering, the SZ-144 can manage up to 6,000APs, 1200 switches and 120,000 clients.

Smart licensing allows customers to manage all licensing needs online at https://support.ruckuswireless.com. With Smart licensing, customers have the ability to buy and assign licenses ata granular level down to 1 (one) AP license.

SmartZone 144-Dataplane (SZ144-D)

The SmartZone™ 144 Data Plane appliance (SZ144-D) is a wireless LAN data plane appliance, that comes in physical form factor with four (4) 1Gbps and four (4) 10Gbps ports. Made to work seamlessly with Ruckus SmartZone network controllers (vSZ-E, vSZ-H), the SmartZone Data Plane appliance (SZ144-D) enables secure tunneled WLANs from Ruckus APs while minimizing CAPEX spending and maximizing Wi-Fi deployment flexibility and scale.

SZ144-D appliance benefits businesses that have leaner IT departments with limited virtualization expertise or that wish to further simplify deployments. Operators, ISPs and large enterprises can deploy the SZ144-D in a centralized data center with SmartZone network controllers, or at specific venues in a distributed topology. In addition, organizations have the flexibility to deploy SZ144-D at each of the tenant locations based on their requirements.

The Data Plane appliance brings multiple high value features, such as:

  - High performance DHCP-server

  - NAT (Network Address Translation)

  - L3 Roaming

  - Flexi-VPN

SmartZone 300 (SZ300)

The SmartZone 300 (SZ300) Flagship Large Scale WLAN Controller is designed for Service Provider and Large Enterprises, which prefer to use appliances. The Carrier Grade platform supports N+1 Active/Active clustering, comprehensive integrated management functionality, high performance operations and flexibility to address many different implementation scenarios.

The SZ300 supports up to 10,000 AP and 100,000 Clients per unit and 30,000 AP and 300,000 Clients per 3+1 Active/Active Cluster, and runs SmartZone 3.5+ release firmware.


SmartZone 300 (SZ300) - Federal

The SmartZone 300 (SZ300) Flagship Large Scale WLAN Controller is designed for Service Provider and Large Enterprises, which prefer to use appliances. The Carrier Grade platform supports N+1 Active/Active clustering, comprehensive integrated management functionality, high performance operations and flexibility to address many different implementation scenarios.

The SZ300 supports up to 10,000 AP and 100,000 Clients per unit and 30,000 AP and 300,000 Clients per 3+1 Active/Active Cluster, and runs SmartZone 3.5+ release firmware.


Unleashed and Multi-Site Manager

Ruckus Unleashed enables controller-less Wi-Fi architecture for small business environments with superior performance, lower costs and simplified management. Separate controllers and access point licenses are no longer needed, significantly reducing up-front costs. With a simplified web interface deploying Unleashed is very easy.

Ruckus Unleashed is custom-designed to help small business owners grow their business, deliver an excellent customer experience and manage costs while supporting Wi-Fi and a variety of mobile devices with minimal IT staff.

Unleashed access points have built-in controller capabilities, including user access controls, guest networking functions, advanced Wi-Fi security and traffic management. Smart Mesh is available on all but H320/R3xx model APs. As businesses grow to multiple sites or a larger scale deployment, Ruckus offers an easy migration path to controller based Wi-Fi, using the same Wi-Fi access point.

Ruckus Unleashed Multi-Site Manager (UMM) is a new NMS platform for Unleashed, ZoneDirector, P300 bridges. If you have Unleashed networks deployed across multiple small sites, Unleashed Multi-Site Manager is the one-stop solution for management, monitoring and reporting. It is a complete management platform that is intuitive and easy to use. It enables Unleashed networks to be securely monitored and managed from anywhere in the world with a single sign-on.




Software

Current Unleashed Software Downloads


Documentation

Current Release Notes and Unleashed Documentation


Virtual SmartZone - (vSZ)

Note: The Virtual SmartCell Gateway (vSCG) has a new name: Virtual SmartZone (vSZ). Same product, new name.

The Ruckus Virtual SmartZone (vSZ) is an NFV-based and cloud-ready WLAN controller for service providers and enterprises ready to elevate their WLAN deployment to the next level of flexibility, resiliency, andscale. vSZ operates in two modes: Essentials and High-Capacity.

Enterprises will find that the Essentials mode (vSZ-E) delivers world-beating Wi-Fi performance in an incredibly easy to manage and cost-effective package that’s friendly to both virtualized and/or distributed environments.

Managed Service Providers deploying the High-Capacity mode (vSZ-H) in their data center will experience a scalable carrier-class Wi-Fi rollout brimming with unique service provider features ready to back up their service level agreements. 


Virtual SmartZone - (vSZ) - Federal

Note: The Virtual SmartCell Gateway (vSCG) has a new name: Virtual SmartZone (vSZ). Same product, new name.

The Ruckus Virtual SmartZone (vSZ) is an NFV-based and cloud-ready WLAN controller for service providers and enterprises ready to elevate their WLAN deployment to the next level of flexibility, resiliency, andscale. vSZ operates in two modes: Essentials and High-Capacity.

Enterprises will find that the Essentials mode (vSZ-E) delivers world-beating Wi-Fi performance in an incredibly easy to manage and cost-effective package that’s friendly to both virtualized and/or distributed environments.

Managed Service Providers deploying the High-Capacity mode (vSZ-H) in their data center will experience a scalable carrier-class Wi-Fi rollout brimming with unique service provider features ready to back up their service level agreements. 


Virtual SmartZone-Dataplane (vSZ-D)

The Ruckus Virtual SmartZone-Dataplane (vSZ-D) is available on the vSZ platform and offers organizations more flexibility in deploying the SZ dataplane as needed in an NFV architechture-aligned fashion.   Deploying vSZ-D offers secured tunneling of user data traffic that encrypts payload traffic, maintains flat network topology, enables mobility across L2 subnets, supports POS data traffic for PCI compliance, and offers differentiated per site policy control and QoS, etc.


Virtual SmartZone-Dataplane (vSZ-D) - Federal

The Ruckus Virtual SmartZone-Dataplane (vSZ-D) is available on the vSZ platform and offers organizations more flexibility in deploying the SZ dataplane as needed in an NFV architechture-aligned fashion.   Deploying vSZ-D offers secured tunneling of user data traffic that encrypts payload traffic, maintains flat network topology, enables mobility across L2 subnets, supports POS data traffic for PCI compliance, and offers differentiated per site policy control and QoS, etc.


ZoneDirector 1000

ZoneDirector 1000 product family

NOTE: ZoneDirector software upgrade is available only to the Premium Support or Software Upgrade Support customers with valid login credentials. If you are a Premium Support or Software Upgrade Support Customer, you can create a login credential Here.

Please read the intended version Release Notes before deploying any new ZoneDirector software.

ZoneDirector 1100

ZoneDirector 1100 Product Family

NOTE: ZoneDirector software upgrade is available only to the Premium Support or Software Upgrade Support customers with valid login credentials. If you are a Premium Support or Software Upgrade Support Customer, you can create a login credential Here.

Please read the Release Notes before deploying any new ZoneDirector software.

Customers with 7962/7762/7025 model AP recommended release is 9.8.3.0.58, found Here.

ZoneDirector 1200

With simplicity and ease of use in mind, the RuckusZoneDirector 1200 is purpose-built to address the gap between standalone, feature-deficient access points (APs) that must be individually managed and the costly, complex high-end enterprise systems that are overkill for most small business environments.

The Ruckus ZoneDirector 1200 can be deployed and operated by non-wireless experts and installed quickly and easily. Any organization with limited IT staff and budget can create a robust and secure multimedia WLAN in a matter of minutes.

This controller is focused on small to medium enterprise business, which scales up to 150 AP’s, 4,000 client devices, and 256 WLANs.  The ZD 1200 works with the ZoneFlex AP’s to deliver a highly reliable and easy to manage Wi-Fi network. The pay as you grow licensing system allows you to start with a standard license for 5 AP’s and grow to a maximum of 150 AP’s with a granularity of one AP license.


Looking for ZD5000, ZD3000, ZD1100 or ZD1000 resources?  Please check EOL Products.

ZoneDirector 3000

ZoneDirector 3000 Product Family

NOTE: ZoneDirector software upgrade is available only to the Premium Support or Software Upgrade Support customers with valid login credentials. If you are a Premium Support or Software Upgrade Support Customer, you can create a login credential Here.

Please read the Release Notes before deploying any new ZoneDirector software to be sure your current AP models are all supported.

Customers with 7962/7762/7025 model AP recommended release is 9.8.3.0.58, found Here.

ZoneDirector 5000

ZoneDirector 5000 Product Family

NOTE: ZoneDirector software upgrade is available only to the Premium Support or Software Upgrade Support customers with valid login credentials. If you are a Premium Support or Software Upgrade Support Customer, you can create a login credential Here.

Please read the Release Notes before deploying any new ZoneDirector software.

Customers with 7962/7762/7025 model AP recommended release is 9.8.3.0.58, found Here.

Working...Please wait

This is here to prevent you from accidentally submitting twice.

The page will automatically refresh.