{"id":"CVE-2023-25717","kind":"vulnerability","aliases":["CVE-2023-25717"],"related":[],"title":"Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as…","description":"Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.\n\nCISA required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.","summary":"Ruckus Wireless access point software has an unspecified flaw in its web services component that allows cross-site request forgery and remote code execution. Per the description, an attacker can run code on the device when the web services component is enabled.","severity":"critical","cvss":9.8,"epss":null,"exploited":true,"exploited_at":"2023-05-12T00:00:00+00:00","products":[{"name":"Ruckus Wireless Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"ruckuswireless ruckus wireless admin","fixed":[],"affected":"<= 10.4","ecosystem":"vendor"},{"name":"ruckuswireless smartzone ap","fixed":["6.1.0.0.9240"],"affected":"< 6.1.0.0.9240","ecosystem":"vendor"},{"name":"ruckuswireless smartzone ap","fixed":["5.2.2.0.2064"],"affected":"< 5.2.2.0.2064","ecosystem":"vendor"},{"name":"ruckuswireless smartzone ap","fixed":["3.6.2.0.795"],"affected":"< 3.6.2.0.795","ecosystem":"vendor"},{"name":"ruckuswireless smartzone ap","fixed":["6.1.1.0.1274"],"affected":"< 6.1.1.0.1274","ecosystem":"vendor"},{"name":"commscope ruckus smartzone firmware","fixed":["5.2.1.3"],"affected":"< 5.2.1.3","ecosystem":"vendor"},{"name":"commscope ruckus smartzone firmware","fixed":[],"affected":"= 6.1.0.0.935","ecosystem":"vendor"},{"name":"commscope ruckus smartzone firmware","fixed":["5.2.1.3.1695"],"affected":"< 5.2.1.3.1695","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","ruckus","smartzone","wireless-access-point","zonedirector"],"not_affected_if":["web-services-disabled"],"how_to_check":"Check whether the web services component is enabled on the Ruckus AP or controller (ZoneDirector, SmartZone, or Solo); the sources do not give the exact setting or command.","fix":"Apply updates per vendor instructions, or disconnect the product if it is end-of-life (per CISA required action); the sources do not name fixed versions.","status":"open","published_at":"2023-02-13T20:15:10+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:06:49+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:06:49Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions, or disconnect the product if it is end-of-life (per CISA required action); the sources do not name fixed versions.\nunknown","reach":"network","impact":"high","summary":"Ruckus Wireless access point software has an unspecified flaw in its web services component that allows cross-site request forgery and remote code execution. Per the description, an attacker can run code on the device when the web services component is enabled.","category":"infrastructure","who_cares":["ruckus","zonedirector","smartzone","wireless-access-point"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs code remotely on the access point.","analyst_note":"Find the Ruckus advisory and fixed firmware versions per product line, and the exact web services setting to disable, via the CISA KEV entry source and vendor security bulletins.","how_to_check":"Check whether the web services component is enabled on the Ruckus AP or controller (ZoneDirector, SmartZone, or Solo); the sources do not give the exact setting or command.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["web-services-disabled"],"user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000507,"input_tokens":2890,"output_tokens":436,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':17A,20A '-25717':18A,21A '10.4':5A 'access':60B,65B,108C 'action':157C 'admin':3A,29A 'allow':6A,78B 'ap':32A,35A,38A,41A,110C,130C,154C 'appli':158C 'attack':92B,132C 'cisa':155C 'code':8A,86B,95B,143C 'commscope':42A,46A,50A 'compon':76B,103B,120C,125C 'contain':112C 'cross':80B,136C 'cross-sit':79B,135C 'csrf':140C 'cve':16A,19A 'descript':90B 'devic':98B 'disconnect':164C 'enabl':105B,127C 'end':170C 'end-of-lif':169C 'execut':9A,87B,144C 'exploit':54B 'firmware':45A,49A,53A 'flaw':71B 'forgeri':83B,139C 'get':14A 'http':13A 'impact':148C 'infrastructur':55B 'instruct':162C 'life':172C 'multiple':24A 'per':88B,160C 'perform':134C 'point':61B,66B,109C 'product':165C 'products':25A 'rce':145C 'remot':7A,85B,142C 'request':15A,82B,138C 'requir':156C 'ruckus':1A,22A,27A,43A,47A,51A,56B,63B,106C,149C 'ruckuswireless':26A,30A,33A,36A,39A 'run':94B 'servic':75B,102B,119C,124C 'site':81B,137C 'smartzon':57B,151C 'smartzone':31A,34A,37A,40A,44A,48A,52A 'softwar':67B,111C 'solo':153C 'unauthent':12A 'unspecifi':70B,114C 'updat':159C 'vendor':161C 'via':10A 'vulner':115C,147C 'web':74B,101B,118C,123C 'wireless':2A,23A,28A,59B,64B,107C 'wireless-access-point':58B 'zonedirector':62B,150C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-02-13T20:15:10+00:00","kev":{"dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions or disconnect product if it is end-of-life.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-25717","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-25717","severity":null,"published_at":"2023-05-12T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T14:39:39+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-25717","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25717","severity":null,"published_at":"2023-02-13T20:15:10+00:00","modified_at":"2026-06-17T05:41:48+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}