Vulnerability Intelligence Report
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVE-2023-25717
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
CISA KEV
Nuclei Template
SSVC: Active Exploitation
Automatable
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:95.11%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-94 ↗CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ruckuswireless | ruckus_wireless_admin | all |
| ruckuswireless | smartzone_ap | all |
| ruckuswireless | e510 | all |
| ruckuswireless | h320 | all |
| ruckuswireless | h350 | all |
| ruckuswireless | h510 | all |
| ruckuswireless | h550 | all |
| ruckuswireless | m510 | all |
| ruckuswireless | r310 | all |
| ruckuswireless | r320 | all |
| ruckuswireless | r350 | all |
| ruckuswireless | r510 | all |
| ruckuswireless | r550 | all |
| ruckuswireless | r610 | all |
| ruckuswireless | r650 | all |
| ruckuswireless | r710 | all |
| ruckuswireless | r720 | all |
| ruckuswireless | r730 | all |
| ruckuswireless | r750 | all |
| ruckuswireless | r760 | all |
| ruckuswireless | r850 | all |
| ruckuswireless | sz-144 | all |
| ruckuswireless | sz100 | all |
| ruckuswireless | sz300 | all |
| ruckuswireless | t310c | all |
| ruckuswireless | t310d | all |
| ruckuswireless | t310n | all |
| ruckuswireless | t310s | all |
| ruckuswireless | t350c | all |
| ruckuswireless | t350d | all |
| ruckuswireless | t350se | all |
| ruckuswireless | t610 | all |
| ruckuswireless | t710 | all |
| ruckuswireless | t710s | all |
| ruckuswireless | t750 | all |
| ruckuswireless | t750se | all |
| ruckuswireless | t811-cm | all |
| ruckuswireless | r500 | all |
| ruckuswireless | r600 | all |
| ruckuswireless | t300 | all |
| ruckuswireless | t301n | all |
| ruckuswireless | t301s | all |
| ruckuswireless | t504 | all |
| ruckuswireless | h500 | all |
| ruckuswireless | r300 | all |
| ruckuswireless | r700 | all |
| ruckuswireless | r560 | all |
| commscope | ruckus_smartzone_firmware | 6.1.0.0.935 |
| ruckuswireless | m510-jp | all |
| ruckuswireless | p300 | all |
| ruckuswireless | q410 | all |
| ruckuswireless | q710 | all |
| ruckuswireless | q910 | all |
| ruckuswireless | t811-cm\(non-spf\) | all |
| ruckuswireless | zd1000 | all |
| ruckuswireless | zd1100 | all |
| ruckuswireless | zd1200 | all |
| ruckuswireless | zd3000 | all |
| ruckuswireless | zd5000 | all |
| ruckuswireless | sz-144-federal | all |
| ruckuswireless | sz300-federal | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
95.107%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2023-02-13T00:00:00 |
| Published | 2023-02-13T00:00:00 |
| Last Updated | 2025-10-21T23:15:27 |
Community Chatter & Buzz