CVE Feed

    Dashboard / CVE / CVE-2023-7338

    CVE-2023-7338

    Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

    Published:Mar 26, 2026
    Last Modified:Jul 15, 2026
    EPS:Mar 26, 2026
    EPSS Score:0.00516
    CVSS Score:7.5

    Affected Products

    Vendor
    Commscope
    Product
    Ruckus C110
    Vendor
    Commscope
    Product
    Ruckus E510
    Vendor
    Commscope
    Product
    Ruckus H320
    Vendor
    Commscope
    Product
    Ruckus H350
    Vendor
    Commscope
    Product
    Ruckus H510
    Vendor
    Commscope
    Product
    Ruckus H550
    Vendor
    Commscope
    Product
    Ruckus M510-jp
    Vendor
    Commscope
    Product
    Ruckus R320
    Vendor
    Commscope
    Product
    Ruckus R350
    Vendor
    Commscope
    Product
    Ruckus R510
    Vendor
    Commscope
    Product
    Ruckus R550
    Vendor
    Commscope
    Product
    Ruckus R610
    Vendor
    Commscope
    Product
    Ruckus R650
    Vendor
    Commscope
    Product
    Ruckus R710
    Vendor
    Commscope
    Product
    Ruckus R720
    Vendor
    Commscope
    Product
    Ruckus R750
    Vendor
    Commscope
    Product
    Ruckus R850
    Vendor
    Commscope
    Product
    Ruckus T310c
    Vendor
    Commscope
    Product
    Ruckus T310n
    Vendor
    Commscope
    Product
    Ruckus T310s
    Vendor
    Commscope
    Product
    Ruckus T350c
    Vendor
    Commscope
    Product
    Ruckus T350d
    Vendor
    Commscope
    Product
    Ruckus T350se
    Vendor
    Commscope
    Product
    Ruckus T610
    Vendor
    Commscope
    Product
    Ruckus T710
    Vendor
    Commscope
    Product
    Ruckus T710s
    Vendor
    Commscope
    Product
    Ruckus T750
    Vendor
    Commscope
    Product
    Ruckus T750se
    Vendor
    Ruckusnetworks
    Product
    Ruckus C110
    Vendor
    Ruckusnetworks
    Product
    Ruckus E510
    Vendor
    Ruckusnetworks
    Product
    Ruckus H320
    Vendor
    Ruckusnetworks
    Product
    Ruckus H350
    Vendor
    Ruckusnetworks
    Product
    Ruckus H510
    Vendor
    Ruckusnetworks
    Product
    Ruckus H550
    Vendor
    Ruckusnetworks
    Product
    Ruckus M510-jp
    Vendor
    Ruckusnetworks
    Product
    Ruckus R320
    Vendor
    Ruckusnetworks
    Product
    Ruckus R350
    Vendor
    Ruckusnetworks
    Product
    Ruckus R510
    Vendor
    Ruckusnetworks
    Product
    Ruckus R550
    Vendor
    Ruckusnetworks
    Product
    Ruckus R610
    Vendor
    Ruckusnetworks
    Product
    Ruckus R650
    Vendor
    Ruckusnetworks
    Product
    Ruckus R710
    Vendor
    Ruckusnetworks
    Product
    Ruckus R720
    Vendor
    Ruckusnetworks
    Product
    Ruckus R750
    Vendor
    Ruckusnetworks
    Product
    Ruckus R850
    Vendor
    Ruckusnetworks
    Product
    Ruckus T310c
    Vendor
    Ruckusnetworks
    Product
    Ruckus T310d
    Vendor
    Ruckusnetworks
    Product
    Ruckus T310n
    Vendor
    Ruckusnetworks
    Product
    Ruckus T310s
    Vendor
    Ruckusnetworks
    Product
    Ruckus T350c
    Vendor
    Ruckusnetworks
    Product
    Ruckus T350d
    Vendor
    Ruckusnetworks
    Product
    Ruckus T350se
    Vendor
    Ruckusnetworks
    Product
    Ruckus T610
    Vendor
    Ruckusnetworks
    Product
    Ruckus T710
    Vendor
    Ruckusnetworks
    Product
    Ruckus T710s
    Vendor
    Ruckusnetworks
    Product
    Ruckus T750
    Vendor
    Ruckusnetworks
    Product
    Ruckus T750se
    Vendor
    Ruckusnetworks
    Product
    Ruckus Unleashed

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-44954 (CVSS 9) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user …
    CVE-2025-44962 (CVSS 5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.…
    CVE-2025-44957 (CVSS 8.5) — Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafte…
    CVE-2025-44960 (CVSS 8.5) — RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an A…
    CVE-2025-44961 (CVSS 9.9) — In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field …
    CVE-2025-46123 (CVSS 7.2) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46116 (CVSS 8.8) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46117 (CVSS 9.1) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruck…
    CVE-2025-46118 (CVSS 5.3) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Rucku…
    CVE-2025-46119 (CVSS 6.3) — An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruck…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High