CVE-2023-25717

🗓️ 13 Feb 2023 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 564 Views🌐 WEB

Ruckus Wireless Admin 10.4 Remote Code Execution CVE-2023-2571

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2023-25717	13 Feb 202300:00	–	attackerkb
Circl	CVE-2023-25717	13 Feb 202322:29	–	circl
CISA KEV Catalog	Multiple Ruckus Wireless Products CSRF and RCE Vulnerability	12 May 202300:00	–	cisa_kev
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	12 May 202312:00	–	cisa
CNNVD	Ruckus Wireless SmartZone 代码注入漏洞	13 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-25717	13 Feb 202300:00	–	cvelist
Hive Pro Threat Advisories	Actors, Threats and Vulnerabilities 08 to 14 May 2023	16 May 202306:27	–	hivepro
Malwarebytes	Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs	15 May 202323:00	–	malwarebytes
Nuclei	Ruckus Wireless Admin - Remote Code Execution	1 Jun 202603:02	–	nuclei
NVD	CVE-2023-25717	13 Feb 202320:15	–	nvd

NVD

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<6.1.0.0.9240

AND

ruckuswireless e510Match-

ruckuswireless h320Match-

ruckuswireless h350Match-

ruckuswireless h510Match-

ruckuswireless h550Match-

ruckuswireless m510Match-

ruckuswireless r310Match-

ruckuswireless r320Match-

ruckuswireless r350Match-

ruckuswireless r510Match-

ruckuswireless r550Match-

ruckuswireless r610Match-

ruckuswireless r650Match-

ruckuswireless r710Match-

ruckuswireless r720Match-

ruckuswireless r730Match-

ruckuswireless r750Match-

ruckuswireless r760Match-

ruckuswireless r850Match-

ruckuswireless sz-144Match-

ruckuswireless sz100Match-

ruckuswireless sz300Match-

ruckuswireless t310cMatch-

ruckuswireless t310dMatch-

ruckuswireless t310nMatch-

ruckuswireless t310sMatch-

ruckuswireless t350cMatch-

ruckuswireless t350dMatch-

ruckuswireless t350seMatch-

ruckuswireless t610Match-

ruckuswireless t710Match-

ruckuswireless t710sMatch-

ruckuswireless t750Match-

ruckuswireless t750seMatch-

ruckuswireless t811-cmMatch-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<5.2.2.0.2064

AND

ruckuswireless e510Match-

ruckuswireless h320Match-

ruckuswireless h510Match-

ruckuswireless m510Match-

ruckuswireless r310Match-

ruckuswireless r320Match-

ruckuswireless r500Match-

ruckuswireless r510Match-

ruckuswireless r550Match-

ruckuswireless r600Match-

ruckuswireless r610Match-

ruckuswireless r650Match-

ruckuswireless r710Match-

ruckuswireless r720Match-

ruckuswireless r730Match-

ruckuswireless r750Match-

ruckuswireless r850Match-

ruckuswireless t300Match-

ruckuswireless t301nMatch-

ruckuswireless t301sMatch-

ruckuswireless t310cMatch-

ruckuswireless t310dMatch-

ruckuswireless t310nMatch-

ruckuswireless t310sMatch-

ruckuswireless t504Match-

ruckuswireless t610Match-

ruckuswireless t710Match-

ruckuswireless t710sMatch-

ruckuswireless t750Match-

ruckuswireless t750seMatch-

ruckuswireless t811-cmMatch-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<3.6.2.0.795

AND

ruckuswireless h500Match-

ruckuswireless r300Match-

ruckuswireless r700Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

ruckuswireless smartzone_apRange<6.1.1.0.1274

AND

ruckuswireless r560Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

commscope ruckus_smartzone_firmwareRange<5.2.1.3

AND

ruckuswireless sz-144Match-

ruckuswireless sz300Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

commscope ruckus_smartzone_firmwareMatch6.1.0.0.935

AND

ruckuswireless sz-144Match-

ruckuswireless sz100Match-

ruckuswireless sz300Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

AND

ruckuswireless m510-jpMatch-

ruckuswireless p300Match-

ruckuswireless q410Match-

ruckuswireless q710Match-

ruckuswireless q910Match-

ruckuswireless t811-cm(non-spf)Match-

ruckuswireless zd1000Match-

ruckuswireless zd1100Match-

ruckuswireless zd1200Match-

ruckuswireless zd3000Match-

ruckuswireless zd5000Match-

Node

ruckuswireless ruckus_wireless_adminRange≤10.4

commscope ruckus_smartzone_firmwareRange<5.2.1.3.1695

AND

ruckuswireless sz-144-federalMatch-

ruckuswireless sz300-federalMatch-

Source	Link
support	www.support.ruckuswireless.com/security_bulletins/315
cybir	www.cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
login_username	query param	/forms/doLogin	Remote Code Execution via unauthenticated HTTP GET using login credentials in query, indicating command injection potential through the password parameter	CWE-94
password	query param	/forms/doLogin	Remote Code Execution via unauthenticated HTTP GET using login credentials in query, indicating command injection potential through the password parameter	CWE-94

03 Nov 2025 18:14Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.94239

SSVC