CVE-2023-25717

Published: Feb 13, 2023Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Affected (8)

Products: Ruckuswireless: Smartzone Ap, Ruckus Wireless Admin · Commscope: Ruckus Smartzone Firmware

Ruckuswireless

2 products

Smartzone Ap

Ruckus Wireless Admin

Commscope

1 product

Ruckus Smartzone Firmware

Configuration A

1 vulnerable · 7 platform

Vulnerable Software	Affected Versions
Ruckuswireless Smartzone Ap	Before 6.1.0.0.9240

Running on/with	Platform Versions
Ruckuswireless H350	All versions
Ruckuswireless H550	All versions
Ruckuswireless R350	All versions
Ruckuswireless R760	All versions
Ruckuswireless T350c	All versions
Ruckuswireless T350d	All versions
Ruckuswireless T350se	All versions

Configuration B

1 vulnerable · 31 platform

Vulnerable Software	Affected Versions
Ruckuswireless Smartzone Ap	Before 5.2.2.0.2064

Running on/with	Platform Versions
Ruckuswireless E510	All versions
Ruckuswireless H320	All versions
Ruckuswireless H510	All versions
Ruckuswireless M510	All versions
Ruckuswireless R310	All versions
Ruckuswireless R320	All versions
Ruckuswireless R500	All versions
Ruckuswireless R510	All versions
Ruckuswireless R550	All versions
Ruckuswireless R600	All versions
Ruckuswireless R610	All versions
Ruckuswireless R650	All versions
Ruckuswireless R710	All versions
Ruckuswireless R720	All versions
Ruckuswireless R730	All versions
Ruckuswireless R750	All versions
Ruckuswireless R850	All versions
Ruckuswireless T300	All versions
Ruckuswireless T301n	All versions
Ruckuswireless T301s	All versions
Ruckuswireless T310c	All versions
Ruckuswireless T310d	All versions
Ruckuswireless T310n	All versions
Ruckuswireless T310s	All versions
Ruckuswireless T504	All versions
Ruckuswireless T610	All versions
Ruckuswireless T710	All versions
Ruckuswireless T710s	All versions
Ruckuswireless T750	All versions
Ruckuswireless T750se	All versions
Ruckuswireless T811 Cm	All versions

Configuration C

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ruckuswireless Smartzone Ap	Before 3.6.2.0.795

Running on/with	Platform Versions
Ruckuswireless H500	All versions
Ruckuswireless R300	All versions
Ruckuswireless R700	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Smartzone Ap	Before 6.1.1.0.1274

Running on/with	Platform Versions
Ruckuswireless R560	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Commscope Ruckus Smartzone Firmware	Before 5.2.1.3

Configuration F

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Commscope Ruckus Smartzone Firmware	Version 6.1.0.0.935

Running on/with	Platform Versions
Ruckuswireless Sz 144	All versions
Ruckuswireless Sz100	All versions
Ruckuswireless Sz300	All versions

Configuration G

11 platform

Running on/with	Platform Versions
Ruckuswireless M510 Jp	All versions
Ruckuswireless P300	All versions
Ruckuswireless Q410	All versions
Ruckuswireless Q710	All versions
Ruckuswireless Q910	All versions
Ruckuswireless T811 Cm(non Spf)	All versions
Ruckuswireless Zd1000	All versions
Ruckuswireless Zd1100	All versions
Ruckuswireless Zd1200	All versions
Ruckuswireless Zd3000	All versions
Ruckuswireless Zd5000	All versions