CVE-2023-25717

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 98%

What it is

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

CISA: Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

What to do

Apply updates per vendor instructions or disconnect product if it is end-of-life.

Deadline for US federal agencies: June 2, 2023

Added to the CISA list: May 12, 2023
Published: February 13, 2023
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 98% in the top 0.1% of all known vulnerabilities
Weakness: CWE-94
More details: NVD · CVE.org · CISA

All references (2)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.