Lucene search

CVE-2023-25717

🗓️ 13 Feb 2023 20:10:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 474 Views🌐 WEB

Ruckus Wireless Admin 10.4 Remote Code Execution CVE-2023-2571

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 14
Malwarebytes	Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs	15 May 202323:00	–	malwarebytes
AttackerKB	CVE-2023-25717	13 Feb 202300:00	–	attackerkb
Circl	CVE-2023-25717	14 Jun 202321:10	–	circl
RedhatCVE	CVE-2023-25717	23 May 202502:13	–	redhatcve
Vulnrichment	CVE-2023-25717	13 Feb 202300:00	–	vulnrichment
Nuclei	Ruckus Wireless Admin - Remote Code Execution	9 May 202312:35	–	nuclei
The Hacker News	Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale	11 Jun 202414:32	–	thn
The Hacker News	Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack	11 May 202307:05	–	thn
The Hacker News	AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services	8 Nov 202414:02	–	thn
CISA KEV Catalog	Multiple Ruckus Wireless Products CSRF and RCE Vulnerability	12 May 202300:00	–	cisa_kev

Nvd

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<6.1.0.0.9240

AND

ruckuswireless e510Match-

ruckuswireless h320Match-

ruckuswireless h350Match-

ruckuswireless h510Match-

ruckuswireless h550Match-

ruckuswireless m510Match-

ruckuswireless r310Match-

ruckuswireless r320Match-

ruckuswireless r350Match-

ruckuswireless r510Match-

ruckuswireless r550Match-

ruckuswireless r610Match-

ruckuswireless r650Match-

ruckuswireless r710Match-

ruckuswireless r720Match-

ruckuswireless r730Match-

ruckuswireless r750Match-

ruckuswireless r760Match-

ruckuswireless r850Match-

ruckuswireless sz-144Match-

ruckuswireless sz100Match-

ruckuswireless sz300Match-

ruckuswireless t310cMatch-

ruckuswireless t310dMatch-

ruckuswireless t310nMatch-

ruckuswireless t310sMatch-

ruckuswireless t350cMatch-

ruckuswireless t350dMatch-

ruckuswireless t350seMatch-

ruckuswireless t610Match-

ruckuswireless t710Match-

ruckuswireless t710sMatch-

ruckuswireless t750Match-

ruckuswireless t750seMatch-

ruckuswireless t811-cmMatch-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<5.2.2.0.2064

AND

ruckuswireless e510Match-

ruckuswireless h320Match-

ruckuswireless h510Match-

ruckuswireless m510Match-

ruckuswireless r310Match-

ruckuswireless r320Match-

ruckuswireless r500Match-

ruckuswireless r510Match-

ruckuswireless r550Match-

ruckuswireless r600Match-

ruckuswireless r610Match-

ruckuswireless r650Match-

ruckuswireless r710Match-

ruckuswireless r720Match-

ruckuswireless r730Match-

ruckuswireless r750Match-

ruckuswireless r850Match-

ruckuswireless t300Match-

ruckuswireless t301nMatch-

ruckuswireless t301sMatch-

ruckuswireless t310cMatch-

ruckuswireless t310dMatch-

ruckuswireless t310nMatch-

ruckuswireless t310sMatch-

ruckuswireless t504Match-

ruckuswireless t610Match-

ruckuswireless t710Match-

ruckuswireless t710sMatch-

ruckuswireless t750Match-

ruckuswireless t750seMatch-

ruckuswireless t811-cmMatch-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<3.6.2.0.795

AND

ruckuswireless h500Match-

ruckuswireless r300Match-

ruckuswireless r700Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<6.1.1.0.1274

AND

ruckuswireless r560Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzoneRange<5.2.1.3

AND

ruckuswireless sz-144Match-

ruckuswireless sz300Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzoneMatch6.1.0.0.935

AND

ruckuswireless sz-144Match-

ruckuswireless sz100Match-

ruckuswireless sz300Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

AND

ruckuswireless m510-jpMatch-

ruckuswireless p300Match-

ruckuswireless q410Match-

ruckuswireless q710Match-

ruckuswireless q910Match-

ruckuswireless t811-cm(non-spf)Match-

ruckuswireless zd1000Match-

ruckuswireless zd1100Match-

ruckuswireless zd1200Match-

ruckuswireless zd3000Match-

ruckuswireless zd5000Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzoneRange<5.2.1.3.1695

AND

ruckuswireless sz-144-federalMatch-

ruckuswireless sz300-federalMatch-

Source	Link
support	www.support.ruckuswireless.com/security_bulletins/315
cybir	www.cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/

Parameter	Position	Path	Description	CWE
login_username	query param	/forms/doLogin	Remote Code Execution via unauthenticated HTTP GET request.	CWE-94
password	query param	/forms/doLogin	Remote Code Execution via unauthenticated HTTP GET request.	CWE-94

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 20:15Current

9.7High risk

Vulners AI Score9.7

CVSS39.8

EPSS0.94354