CVE Feed

    Dashboard / CVE / CVE-2023-25717

    CVE-2023-25717

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

    Published:Feb 13, 2023
    Last Modified:Nov 3, 2025
    EPS:Feb 13, 2023
    EPSS Score:0.94239
    CVSS Score:9.8

    CISA Notification

    Description

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

    Required Action:

    Apply updates per vendor instructions or disconnect product if it is end-of-life.

    Notes:

    No extra notes provided.

    Due Date
    Jun 2, 2023
    1197 days ago
    Alert Date
    May 12, 2023
    1218 days ago

    Affected Products

    Vendor
    Commscope
    Product
    Ruckus Smartzone Firmware
    Vendor
    Ruckuswireless
    Product
    E510
    Vendor
    Ruckuswireless
    Product
    H320
    Vendor
    Ruckuswireless
    Product
    H350
    Vendor
    Ruckuswireless
    Product
    H500
    Vendor
    Ruckuswireless
    Product
    H510
    Vendor
    Ruckuswireless
    Product
    H550
    Vendor
    Ruckuswireless
    Product
    M510
    Vendor
    Ruckuswireless
    Product
    M510-jp
    Vendor
    Ruckuswireless
    Product
    P300
    Vendor
    Ruckuswireless
    Product
    Q410
    Vendor
    Ruckuswireless
    Product
    Q710
    Vendor
    Ruckuswireless
    Product
    Q910
    Vendor
    Ruckuswireless
    Product
    R300
    Vendor
    Ruckuswireless
    Product
    R310
    Vendor
    Ruckuswireless
    Product
    R320
    Vendor
    Ruckuswireless
    Product
    R350
    Vendor
    Ruckuswireless
    Product
    R500
    Vendor
    Ruckuswireless
    Product
    R510
    Vendor
    Ruckuswireless
    Product
    R550
    Vendor
    Ruckuswireless
    Product
    R560
    Vendor
    Ruckuswireless
    Product
    R600
    Vendor
    Ruckuswireless
    Product
    R610
    Vendor
    Ruckuswireless
    Product
    R650
    Vendor
    Ruckuswireless
    Product
    R700
    Vendor
    Ruckuswireless
    Product
    R710
    Vendor
    Ruckuswireless
    Product
    R720
    Vendor
    Ruckuswireless
    Product
    R730
    Vendor
    Ruckuswireless
    Product
    R750
    Vendor
    Ruckuswireless
    Product
    R760
    Vendor
    Ruckuswireless
    Product
    R850
    Vendor
    Ruckuswireless
    Product
    Ruckus Wireless Admin
    Vendor
    Ruckuswireless
    Product
    Smartzone Ap
    Vendor
    Ruckuswireless
    Product
    Sz-144
    Vendor
    Ruckuswireless
    Product
    Sz-144-federal
    Vendor
    Ruckuswireless
    Product
    Sz100
    Vendor
    Ruckuswireless
    Product
    Sz300
    Vendor
    Ruckuswireless
    Product
    Sz300-federal
    Vendor
    Ruckuswireless
    Product
    T300
    Vendor
    Ruckuswireless
    Product
    T301n
    Vendor
    Ruckuswireless
    Product
    T301s
    Vendor
    Ruckuswireless
    Product
    T310c
    Vendor
    Ruckuswireless
    Product
    T310d
    Vendor
    Ruckuswireless
    Product
    T310n
    Vendor
    Ruckuswireless
    Product
    T310s
    Vendor
    Ruckuswireless
    Product
    T350c
    Vendor
    Ruckuswireless
    Product
    T350d
    Vendor
    Ruckuswireless
    Product
    T350se
    Vendor
    Ruckuswireless
    Product
    T504
    Vendor
    Ruckuswireless
    Product
    T610
    Vendor
    Ruckuswireless
    Product
    T710
    Vendor
    Ruckuswireless
    Product
    T710s
    Vendor
    Ruckuswireless
    Product
    T750
    Vendor
    Ruckuswireless
    Product
    T750se
    Vendor
    Ruckuswireless
    Product
    T811-cm
    Vendor
    Ruckuswireless
    Product
    T811-cm\(non-spf\)
    Vendor
    Ruckuswireless
    Product
    Zd1000
    Vendor
    Ruckuswireless
    Product
    Zd1100
    Vendor
    Ruckuswireless
    Product
    Zd1200
    Vendor
    Ruckuswireless
    Product
    Zd3000
    Vendor
    Ruckuswireless
    Product
    Zd5000

    Exploits

    https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High