← Database

CVE-2023-25717

CRITICAL CVSS: 9.8 Published: 2023-02-13 Modified: 2026-06-17

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Affected Platforms

Ruckuswireless R350Ruckuswireless Q910Ruckuswireless T710SRuckuswireless Q410Ruckuswireless R720Ruckuswireless R730Ruckuswireless Zd3000Ruckuswireless R560Ruckuswireless M510Ruckuswireless R850

Weakness Type

CWE-94, CWE-94

References