VULNERABILITY INTELLIGENCE

CVE-2023-25717

CVSS score9.8 CRITICAL

EPSS probability98.07%

CISA KEVKnown exploited vulnerability

Published2023-02-13

Last modified2026-06-17

Known Exploited Vulnerability

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Vendor / product: Ruckus Wireless / Multiple Products

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.