Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated…
Priority CRITICAL 100Exploited in the wildCWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-94.
Summary
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Why it matters now
Exploitation Active In CISA KEV since 2023-05-12CISA due date 2023-06-02
EPSS 0.98069 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 66
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* | up to 10.4 | Vulnerable | Ruckus Wireless |
| cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* | before 6.1.0.0.9240 | Vulnerable | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:h350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:h550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
- cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* Versions up to 10.4 Vulnerable ·Ruckus Wireless
- cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* Versions before 6.1.0.0.9240 Vulnerable ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:h350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:h550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
Show 56 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:ruckuswireless:r350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r760:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t350c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t350d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t350se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* | before 5.2.2.0.2064 | Vulnerable | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t301n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t301s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t504:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* | before 3.6.2.0.795 | Vulnerable | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:h500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* | before 6.1.1.0.1274 | Vulnerable | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:r560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:* | before 5.2.1.3 | Vulnerable | CommScope, Inc. |
| cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.0.0.935:*:*:*:*:*:*:* | 6.1.0.0.935 | Vulnerable | CommScope, Inc. |
| cpe:2.3:h:ruckuswireless:m510-jp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:p300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:q410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:q710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:q910:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:t811-cm\(non-spf\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:zd1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:zd1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:zd1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:zd3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:zd5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:* | before 5.2.1.3.1695 | Vulnerable | CommScope, Inc. |
| cpe:2.3:h:ruckuswireless:sz-144-federal:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
| cpe:2.3:h:ruckuswireless:sz300-federal:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ruckus Wireless |
- cpe:2.3:h:ruckuswireless:r350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t350c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t350d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t350se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* Versions before 5.2.2.0.2064 Vulnerable ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t301n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t301s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* Versions before 3.6.2.0.795 Vulnerable ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:h500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* Versions before 6.1.1.0.1274 Vulnerable ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:r560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:* Versions before 5.2.1.3 Vulnerable ·CommScope, Inc.
- cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.0.0.935:*:*:*:*:*:*:* Versions 6.1.0.0.935 Vulnerable ·CommScope, Inc.
- cpe:2.3:h:ruckuswireless:m510-jp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:p300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:q410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:q710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:q910:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:t811-cm\(non-spf\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:zd1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:zd1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:zd1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:zd3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:zd5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:* Versions before 5.2.1.3.1695 Vulnerable ·CommScope, Inc.
- cpe:2.3:h:ruckuswireless:sz-144-federal:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
- cpe:2.3:h:ruckuswireless:sz300-federal:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ruckus Wireless
Remediation
No fixed version listed by the sources yet.
Timeline
- 2023-05-12 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2023-25717
- 2026-10-03 Alias added: GHSA-53wx-2f9c-xxxr
References
Sources
- CVE-2023-25717 · CVE Program
- CVE-2023-25717 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-53wx-2f9c-xxxr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences