CVEvulnerability

CVE-2023-25717

9.8 CRITICAL Known exploited Published 2023-02-13 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability — Ruckus Wireless Multiple Products

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

Added to KEV: 2023-05-12
Remediation due: 2023-06-02
Ransomware use: Unknown
Required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.
Notes: https://support.ruckuswireless.com/security_bulletins/315; https://nvd.nist.gov/vuln/detail/CVE-2023-25717

Status: Analyzed
Published: 2023-02-13
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-94

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Affected configurations

• ruckuswireless ruckus wireless admin (<= 10.4) • ruckuswireless smartzone ap (< 6.1.0.0.9240) • ruckuswireless smartzone ap (< 5.2.2.0.2064) • ruckuswireless smartzone ap (< 3.6.2.0.795) • ruckuswireless smartzone ap (< 6.1.1.0.1274) • commscope ruckus smartzone firmware (< 5.2.1.3) • commscope ruckus smartzone firmware 6.1.0.0.935 • commscope ruckus smartzone firmware (< 5.2.1.3.1695)

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References