Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-25717
HistoryFeb 13, 2023 - 8:15 p.m.

CVE-2023-25717

2023-02-1320:15:10
CWE-94
[email protected]
web.nvd.nist.gov
ruckus wireless
admin
remote code execution
http
get request
vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.957 High

EPSS

Percentile

99.4%

JSON

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Affected configurations

NVD
Node
ruckuswirelesse510Match-
OR
ruckuswirelessh320Match-
OR
ruckuswirelessh350Match-
OR
ruckuswirelessh510Match-
OR
ruckuswirelessh550Match-
OR
ruckuswirelessm510Match-
OR
ruckuswirelessr310Match-
OR
ruckuswirelessr320Match-
OR
ruckuswirelessr350Match-
OR
ruckuswirelessr510Match-
OR
ruckuswirelessr550Match-
OR
ruckuswirelessr610Match-
OR
ruckuswirelessr650Match-
OR
ruckuswirelessr710Match-
OR
ruckuswirelessr720Match-
OR
ruckuswirelessr730Match-
OR
ruckuswirelessr750Match-
OR
ruckuswirelessr760Match-
OR
ruckuswirelessr850Match-
OR
ruckuswirelesssz-144Match-
OR
ruckuswirelesssz100Match-
OR
ruckuswirelesssz300Match-
OR
ruckuswirelesst310cMatch-
OR
ruckuswirelesst310dMatch-
OR
ruckuswirelesst310nMatch-
OR
ruckuswirelesst310sMatch-
OR
ruckuswirelesst350cMatch-
OR
ruckuswirelesst350dMatch-
OR
ruckuswirelesst350seMatch-
OR
ruckuswirelesst610Match-
OR
ruckuswirelesst710Match-
OR
ruckuswirelesst710sMatch-
OR
ruckuswirelesst750Match-
OR
ruckuswirelesst750seMatch-
OR
ruckuswirelesst811-cmMatch-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzone_apRange<6.1.0.0.9240
Node
ruckuswirelesse510Match-
OR
ruckuswirelessh320Match-
OR
ruckuswirelessh510Match-
OR
ruckuswirelessm510Match-
OR
ruckuswirelessr310Match-
OR
ruckuswirelessr320Match-
OR
ruckuswirelessr500Match-
OR
ruckuswirelessr510Match-
OR
ruckuswirelessr550Match-
OR
ruckuswirelessr600Match-
OR
ruckuswirelessr610Match-
OR
ruckuswirelessr650Match-
OR
ruckuswirelessr710Match-
OR
ruckuswirelessr720Match-
OR
ruckuswirelessr730Match-
OR
ruckuswirelessr750Match-
OR
ruckuswirelessr850Match-
OR
ruckuswirelesst300Match-
OR
ruckuswirelesst301nMatch-
OR
ruckuswirelesst301sMatch-
OR
ruckuswirelesst310cMatch-
OR
ruckuswirelesst310dMatch-
OR
ruckuswirelesst310nMatch-
OR
ruckuswirelesst310sMatch-
OR
ruckuswirelesst504Match-
OR
ruckuswirelesst610Match-
OR
ruckuswirelesst710Match-
OR
ruckuswirelesst710sMatch-
OR
ruckuswirelesst750Match-
OR
ruckuswirelesst750seMatch-
OR
ruckuswirelesst811-cmMatch-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzone_apRange<5.2.2.0.2064
Node
ruckuswirelessh500Match-
OR
ruckuswirelessr300Match-
OR
ruckuswirelessr700Match-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzone_apRange<3.6.2.0.795
Node
ruckuswirelessr560Match-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzone_apRange<6.1.1.0.1274
Node
ruckuswirelesssz-144Match-
OR
ruckuswirelesssz300Match-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzoneRange<5.2.1.3
Node
ruckuswirelesssz-144Match-
OR
ruckuswirelesssz100Match-
OR
ruckuswirelesssz300Match-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzoneMatch6.1.0.0.935
Node
ruckuswirelessm510-jpMatch-
OR
ruckuswirelessp300Match-
OR
ruckuswirelessq410Match-
OR
ruckuswirelessq710Match-
OR
ruckuswirelessq910Match-
OR
ruckuswirelesst811-cm\(non-spf\)Match-
OR
ruckuswirelesszd1000Match-
OR
ruckuswirelesszd1100Match-
OR
ruckuswirelesszd1200Match-
OR
ruckuswirelesszd3000Match-
OR
ruckuswirelesszd5000Match-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
Node
ruckuswirelesssz-144-federalMatch-
OR
ruckuswirelesssz300-federalMatch-
AND
ruckuswirelessruckus_wireless_adminRange≤10.4
OR
ruckuswirelesssmartzoneRange<5.2.1.3.1695

Related

nuclei 1
cve 1
prion 1
cvelist 1
attackerkb 1
malwarebytes 1
cisa_kev 1
thn 2
hivepro 1
nuclei
nuclei
Ruckus Wireless Admin - Remote Code Execution
2023-05-09 12:35:28
cve
cve
CVE-2023-25717
2023-02-13 20:15:10
prion
prion
Remote code execution
2023-02-13 20:15:00
cvelist
cvelist
CVE-2023-25717
2023-02-13 00:00:00
attackerkb
attackerkb
CVE-2023-25717
2023-02-13 00:00:00
malwarebytes
malwarebytes
Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs
2023-05-15 23:00:00
cisa_kev
cisa_kev
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
2023-05-12 00:00:00
thn
thn
Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
2024-06-11 14:32:00
Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack
2023-05-11 07:05:00
hivepro
hivepro
Actors, Threats and Vulnerabilities 08 to 14 May 2023
2023-05-16 06:27:25

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.957 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2023-25717
nuclei1cve1prion1cvelist1attackerkb1malwarebytes1cisa_kev1thn2hivepro1