TI-2023-06704 Aliases CVE-2023-7338 GHSA-pm6g-73h3-xpjp

Ruckus Unleashed Authenticated RCE in Gateway Mode

LOW 36CWE-78Published 2026-03-26 · Updated 2026-07-15

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: Present
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00525 44th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
RUCKUS Networks	RUCKUS H350	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS H550	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS R350	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS R550	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS R650	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS R750	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS R850	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS T350c	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS T350d	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS T350se	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS T750	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS T750SE	unknown and later	—	No fix listed	CNA
RUCKUS Networks	RUCKUS Unleashed	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus C110	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus E510	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus H320	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus H510	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus M510-JP	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus R320	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus R510	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus R610	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus R710	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus R720	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T310c	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T310d	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T310n	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T310s	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T610	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T710	unknown and later	—	No fix listed	CNA
RUCKUS Networks	Ruckus T710s	unknown and later	—	No fix listed	CNA

RUCKUS H350 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS H550 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS R350 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS R550 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS R650 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS R750 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS R850 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS T350c VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS T350d VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS T350se VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS T750 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS T750SE VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
RUCKUS Unleashed VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus C110 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus E510 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus H320 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus H510 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus M510-JP VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus R320 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus R510 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus R610 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus R710 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus R720 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T310c VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T310d VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T310n VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T310s VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T610 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T710 VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA
Ruckus T710s VendorRUCKUS Networks Affected unknown and later Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-7338
2026-10-03 Alias added: GHSA-pm6g-73h3-xpjp

References

Advisory 1

Ruckus Security Bulletin 20230731

TI-2025-42865 Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE CVSS 4.0CRITICAL 10.0
TI-2025-42866 Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE CVSS 4.0CRITICAL 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences