CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2023-25717

CVSS 9.8v3.1pub. 2023-02-13upd. 2025-11-03

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Commscope Ruckus Smartzone Firmware
OS
Commscope
6.1.0.0.935< 5.2.1.3< 5.2.1.3.1695
Ruckuswireless E510
HW
Ruckuswireless
all versions
Ruckuswireless H320
HW
Ruckuswireless
all versions
Ruckuswireless H350
HW
Ruckuswireless
all versions
Ruckuswireless H500
HW
Ruckuswireless
all versions
Ruckuswireless H510
HW
Ruckuswireless
all versions
Ruckuswireless H550
HW
Ruckuswireless
all versions
Ruckuswireless M510
HW
Ruckuswireless
all versions
Ruckuswireless M510 Jp
HW
Ruckuswireless
all versions
Ruckuswireless P300
HW
Ruckuswireless
all versions
Ruckuswireless Q410
HW
Ruckuswireless
all versions
Ruckuswireless Q710
HW
Ruckuswireless
all versions
Ruckuswireless Q910
HW
Ruckuswireless
all versions
Ruckuswireless R300
HW
Ruckuswireless
all versions
Ruckuswireless R310
HW
Ruckuswireless
all versions
Ruckuswireless R320
HW
Ruckuswireless
all versions
Ruckuswireless R350
HW
Ruckuswireless
all versions
Ruckuswireless R500
HW
Ruckuswireless
all versions
Ruckuswireless R510
HW
Ruckuswireless
all versions
Ruckuswireless R550
HW
Ruckuswireless
all versions
Ruckuswireless R560
HW
Ruckuswireless
all versions
Ruckuswireless R600
HW
Ruckuswireless
all versions
Ruckuswireless R610
HW
Ruckuswireless
all versions
Ruckuswireless R650
HW
Ruckuswireless
all versions
Ruckuswireless R700
HW
Ruckuswireless
all versions
Ruckuswireless R710
HW
Ruckuswireless
all versions
Ruckuswireless R720
HW
Ruckuswireless
all versions
Ruckuswireless R730
HW
Ruckuswireless
all versions
Ruckuswireless R750
HW
Ruckuswireless
all versions
Ruckuswireless R760
HW
Ruckuswireless
all versions

CISA KEV — detailsi

Vendori: Ruckus Wireless
Producti: Multiple Products
Added to KEVi: May 12, 2023
Remediation deadline (US Federal)i: June 2, 2023(overdue)

🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions or disconnect product if it is end-of-life.

CISA descriptioni

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

🔴