What’s Vulnerable › Vulnerabilities

CVE-2023-25717: Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2023-05-12
• EPSS: 98.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-13 · updated 2026-06-17
• Weakness: CWE-94

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Affected products

• RUCKUS SmartZone: before 5.2.1.3; before 5.2.1.3.1695; 6.1.0.0.935 — fixed in 5.2.1.3, 5.2.1.3.1695
• Ruckuswireless Ruckus Wireless Admin: through 10.4
• Ruckuswireless Smartzone Ap: before 6.1.0.0.9240; before 5.2.2.0.2064; before 3.6.2.0.795; before 6.1.1.0.1274 — fixed in 3.6.2.0.795, 5.2.2.0.2064, 6.1.0.0.9240, 6.1.1.0.1274

How to fix

Upgrade to a fixed version: RUCKUS SmartZone 5.2.1.3, 5.2.1.3.1695; Ruckuswireless Smartzone Ap 3.6.2.0.795, 5.2.2.0.2064, 6.1.0.0.9240, 6.1.1.0.1274. Check the vendor advisory for mitigations.

References

• https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
• https://support.ruckuswireless.com/security_bulletins/315
• https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
• https://support.ruckuswireless.com/security_bulletins/315
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-25717

Get alerted when CVE-2023-25717 or the next vulnerability affects your stack