VYPR
← All advisories
Critical severity9.8CISA KEVNVD Advisory· Published Feb 13, 2023· Updated Jun 17, 2026

CVE-2023-25717

CVE-2023-25717

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Ruckus/Ruckus Wireless Admin
    cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*
    Range: <=10.4
  • Commscope/Ruckus Smartzone Firmware2 versions
    cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*range: <5.2.1.3
    • cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.0.0.935:*:*:*:*:*:*:*
  • Ruckus/Smartzone Ap
    cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:*
    Range: <6.1.0.0.9240
  • Ruckus/Wireless Admindescription
  • Ruckus/Adminllm-create
    Range: <10.4
  • Ruckus/Wireless Adminllm-create
    Range: <10.4

Patches

Vulnerability mechanics

References

3

News mentions

4