What’s Vulnerable › Vulnerabilities

CVE-2023-7338: Ruckus Unleashed Authenticated RCE in Gateway Mode

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-26 · updated 2026-06-17
• Weakness: CWE-78

Description

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

Affected products

• Ruckus Networks Ruckus C110: all versions
• Ruckus Networks Ruckus E510: all versions
• Ruckus Networks Ruckus H320: all versions
• Ruckus Networks RUCKUS H350: all versions
• Ruckus Networks Ruckus H510: all versions
• Ruckus Networks RUCKUS H550: all versions
• Ruckus Networks Ruckus M510-JP: all versions
• Ruckus Networks Ruckus R320: all versions
• Ruckus Networks RUCKUS R350: all versions
• Ruckus Networks Ruckus R510: all versions
• Ruckus Networks RUCKUS R550: all versions
• Ruckus Networks Ruckus R610: all versions
• Ruckus Networks RUCKUS R650: all versions
• Ruckus Networks Ruckus R710: all versions
• Ruckus Networks Ruckus R720: all versions
• Ruckus Networks RUCKUS R750: all versions
• Ruckus Networks RUCKUS R850: all versions
• Ruckus Networks Ruckus T310c: all versions
• Ruckus Networks Ruckus T310d: all versions
• Ruckus Networks Ruckus T310n: all versions
• Ruckus Networks Ruckus T310s: all versions
• Ruckus Networks RUCKUS T350c: all versions
• Ruckus Networks RUCKUS T350d: all versions
• Ruckus Networks RUCKUS T350se: all versions
• Ruckus Networks Ruckus T610: all versions
• Ruckus Networks Ruckus T710: all versions
• Ruckus Networks Ruckus T710s: all versions
• Ruckus Networks RUCKUS T750: all versions
• Ruckus Networks RUCKUS T750SE: all versions
• Ruckus Networks RUCKUS Unleashed: all versions

References

• https://support.ruckuswireless.com/security_bulletins/320
• https://www.vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode

Get alerted when CVE-2023-7338 or the next vulnerability affects your stack