CVE-2021-33218

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access.

• CWE-798

• https://korelogic.com/advisories.htmlThird Party Advisory
• https://seclists.org/fulldisclosure/2021/May/74Mailing List, Third Party Advisory
• https://korelogic.com/advisories.htmlThird Party Advisory
• https://seclists.org/fulldisclosure/2021/May/74Mailing List, Third Party Advisory

Published

Jul 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33212A Cross-site scripting (XSS) vulnerability in the "View in B…5.4
• CVE-2021-33213An SSRF vulnerability in the "Upload from URL" feature in El…6.5
• CVE-2021-33214In HMS Ewon eCatcher through 6.6.4, weak filesystem permissi…6.1
• CVE-2021-33215An issue was discovered in CommScope Ruckus IoT Controller 1…4.3
• CVE-2021-33216An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33217An issue was discovered in CommScope Ruckus IoT Controller 1…8.8
• CVE-2021-33219An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-3322Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassemb…6.5
• CVE-2021-33220An issue was discovered in CommScope Ruckus IoT Controller 1…7.8
• CVE-2021-33221An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33223An issue discovered in SeedDMS 6.0.15 allows an attacker to …8.8
• CVE-2021-33224File upload vulnerability in Umbraco Forms v.8.7.0 allows un…9.8