CVE-2023-25717

Published Feb 13, 2023 CVSS 3.1 · 9.8 Critical EPSS 98.1% KEV · Listed
Description
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Commscope
Commscope ruckus Smartzone Firmware
CPEs cpe:2.3:o:ruckuswireless:smartzone:*:*:*:*:*:*:*:*
cpe:2.3:o:ruckuswireless:smartzone:6.1.0.0.935:*:*:*:*:*:*:*
cpe:2.3:o:commscope:ruckus_smartzone_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:commscope:ruckus_smartzone_firmware:6.1.0.0.935:*:*:*:*:*:*:*
Vendors & Products Ruckuswireless smartzone
Commscope
Commscope ruckus Smartzone Firmware
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2023-05-12'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 21, 2025, 11:15 PM
Reserved
Feb 13, 2023, 12:00 AM
Status
Analyzed
Published
Feb 13, 2023, 8:15 PM
Modified
Jun 17, 2026, 5:41 AM