CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25717

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.944

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 9.8

Proposed Action

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

Ransomware Campaign

Unknown

References

Products affected by CVE-2023-25717

Ruckuswireless » Ruckus Wireless Admin » Version: N/A

cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:-
Ruckuswireless » Ruckus Wireless Admin » Version: 10.4

cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:10.4
Ruckuswireless » E510 » Version: N/A

cpe:2.3:h:ruckuswireless:e510:-
Ruckuswireless » H320 » Version: N/A

cpe:2.3:h:ruckuswireless:h320:-
Ruckuswireless » H350 » Version: N/A

cpe:2.3:h:ruckuswireless:h350:-
Ruckuswireless » H500 » Version: N/A

cpe:2.3:h:ruckuswireless:h500:-
Ruckuswireless » H510 » Version: N/A

cpe:2.3:h:ruckuswireless:h510:-
Ruckuswireless » H550 » Version: N/A

cpe:2.3:h:ruckuswireless:h550:-
Ruckuswireless » M510-Jp » Version: N/A

cpe:2.3:h:ruckuswireless:m510-jp:-
Ruckuswireless » M510 » Version: N/A

cpe:2.3:h:ruckuswireless:m510:-
Ruckuswireless » P300 » Version: N/A

cpe:2.3:h:ruckuswireless:p300:-
Ruckuswireless » Q410 » Version: N/A

cpe:2.3:h:ruckuswireless:q410:-
Ruckuswireless » Q710 » Version: N/A

cpe:2.3:h:ruckuswireless:q710:-
Ruckuswireless » Q910 » Version: N/A

cpe:2.3:h:ruckuswireless:q910:-
Ruckuswireless » R300 » Version: N/A

cpe:2.3:h:ruckuswireless:r300:-
Ruckuswireless » R310 » Version: N/A

cpe:2.3:h:ruckuswireless:r310:-
Ruckuswireless » R320 » Version: N/A

cpe:2.3:h:ruckuswireless:r320:-
Ruckuswireless » R350 » Version: N/A

cpe:2.3:h:ruckuswireless:r350:-
Ruckuswireless » R500 » Version: N/A

cpe:2.3:h:ruckuswireless:r500:-
Ruckuswireless » R510 » Version: N/A

cpe:2.3:h:ruckuswireless:r510:-
Ruckuswireless » R550 » Version: N/A

cpe:2.3:h:ruckuswireless:r550:-
Ruckuswireless » R560 » Version: N/A

cpe:2.3:h:ruckuswireless:r560:-
Ruckuswireless » R600 » Version: N/A

cpe:2.3:h:ruckuswireless:r600:-
Ruckuswireless » R610 » Version: N/A

cpe:2.3:h:ruckuswireless:r610:-
Ruckuswireless » R650 » Version: N/A

cpe:2.3:h:ruckuswireless:r650:-
Ruckuswireless » R700 » Version: N/A

cpe:2.3:h:ruckuswireless:r700:-
Ruckuswireless » R710 » Version: N/A

cpe:2.3:h:ruckuswireless:r710:-
Ruckuswireless » R720 » Version: N/A

cpe:2.3:h:ruckuswireless:r720:-
Ruckuswireless » R730 » Version: N/A

cpe:2.3:h:ruckuswireless:r730:-
Ruckuswireless » R750 » Version: N/A

cpe:2.3:h:ruckuswireless:r750:-
Ruckuswireless » R760 » Version: N/A

cpe:2.3:h:ruckuswireless:r760:-
Ruckuswireless » R850 » Version: N/A

cpe:2.3:h:ruckuswireless:r850:-
Ruckuswireless » Sz-144-Federal » Version: N/A

cpe:2.3:h:ruckuswireless:sz-144-federal:-
Ruckuswireless » Sz-144 » Version: N/A

cpe:2.3:h:ruckuswireless:sz-144:-
Ruckuswireless » Sz100 » Version: N/A

cpe:2.3:h:ruckuswireless:sz100:-
Ruckuswireless » Sz300-Federal » Version: N/A

cpe:2.3:h:ruckuswireless:sz300-federal:-
Ruckuswireless » Sz300 » Version: N/A

cpe:2.3:h:ruckuswireless:sz300:-
Ruckuswireless » T300 » Version: N/A

cpe:2.3:h:ruckuswireless:t300:-
Ruckuswireless » T301n » Version: N/A

cpe:2.3:h:ruckuswireless:t301n:-
Ruckuswireless » T301s » Version: N/A

cpe:2.3:h:ruckuswireless:t301s:-
Ruckuswireless » T310c » Version: N/A

cpe:2.3:h:ruckuswireless:t310c:-
Ruckuswireless » T310d » Version: N/A

cpe:2.3:h:ruckuswireless:t310d:-
Ruckuswireless » T310n » Version: N/A

cpe:2.3:h:ruckuswireless:t310n:-
Ruckuswireless » T310s » Version: N/A

cpe:2.3:h:ruckuswireless:t310s:-
Ruckuswireless » T350c » Version: N/A

cpe:2.3:h:ruckuswireless:t350c:-
Ruckuswireless » T350d » Version: N/A

cpe:2.3:h:ruckuswireless:t350d:-
Ruckuswireless » T350se » Version: N/A

cpe:2.3:h:ruckuswireless:t350se:-
Ruckuswireless » T504 » Version: N/A

cpe:2.3:h:ruckuswireless:t504:-
Ruckuswireless » T610 » Version: N/A

cpe:2.3:h:ruckuswireless:t610:-
Ruckuswireless » T710 » Version: N/A

cpe:2.3:h:ruckuswireless:t710:-
Ruckuswireless » T710s » Version: N/A

cpe:2.3:h:ruckuswireless:t710s:-
Ruckuswireless » T750 » Version: N/A

cpe:2.3:h:ruckuswireless:t750:-
Ruckuswireless » T750se » Version: N/A

cpe:2.3:h:ruckuswireless:t750se:-
Ruckuswireless » T811-Cm(Non-Spf) » Version: N/A

cpe:2.3:h:ruckuswireless:t811-cm(non-spf):-
Ruckuswireless » T811-Cm » Version: N/A

cpe:2.3:h:ruckuswireless:t811-cm:-
Ruckuswireless » Zd1000 » Version: N/A

cpe:2.3:h:ruckuswireless:zd1000:-
Ruckuswireless » Zd1100 » Version: N/A

cpe:2.3:h:ruckuswireless:zd1100:-
Ruckuswireless » Zd1200 » Version: N/A

cpe:2.3:h:ruckuswireless:zd1200:-
Ruckuswireless » Zd3000 » Version: N/A

cpe:2.3:h:ruckuswireless:zd3000:-
Ruckuswireless » Zd5000 » Version: N/A

cpe:2.3:h:ruckuswireless:zd5000:-
Ruckuswireless » Smartzone » Version: N/A

cpe:2.3:o:ruckuswireless:smartzone:-
Ruckuswireless » Smartzone » Version: 5.2.1.3

cpe:2.3:o:ruckuswireless:smartzone:5.2.1.3
Ruckuswireless » Smartzone » Version: 6.1.0.0.935

cpe:2.3:o:ruckuswireless:smartzone:6.1.0.0.935
Ruckuswireless » Smartzone Ap » Version: N/A

cpe:2.3:o:ruckuswireless:smartzone_ap:-
Ruckuswireless » Smartzone Ap » Version: 3.6.2.0.795

cpe:2.3:o:ruckuswireless:smartzone_ap:3.6.2.0.795
Ruckuswireless » Smartzone Ap » Version: 5.2.2.0.2064

cpe:2.3:o:ruckuswireless:smartzone_ap:5.2.2.0.2064
Ruckuswireless » Smartzone Ap » Version: 6.1.0.0.9240

cpe:2.3:o:ruckuswireless:smartzone_ap:6.1.0.0.9240

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25717

Products

Pricing

Contact Us