CVE-2021-33220

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist.

• CWE-798

• http://seclists.org/fulldisclosure/2021/May/73Mailing List, Third Party Advisory
• https://korelogic.com/advisories.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2021/May/73Mailing List, Third Party Advisory
• https://korelogic.com/advisories.htmlThird Party Advisory

Published

Jul 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33215An issue was discovered in CommScope Ruckus IoT Controller 1…4.3
• CVE-2021-33216An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33217An issue was discovered in CommScope Ruckus IoT Controller 1…8.8
• CVE-2021-33218An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33219An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-3322Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassemb…6.5
• CVE-2021-33221An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33223An issue discovered in SeedDMS 6.0.15 allows an attacker to …8.8
• CVE-2021-33224File upload vulnerability in Umbraco Forms v.8.7.0 allows un…9.8
• CVE-2021-33226Buffer Overflow vulnerability in Saltstack v.3003 and before…9.8
• CVE-2021-3323Integer Underflow in 6LoWPAN IPHC Header Uncompression in Ze…9.8
• CVE-2021-33231Cross Site Scripting (XSS) vulnerability in New equipment pa…5.4