CVE-2023-25717: Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.
· high severity · unattributed attribution
Evidence and provenance
- Original source
- CISA KEV report ↗
- Published
- 2023-05-12T00:00:00Z
- Confidence basis
- No actor match
- Record ID
85c020bccf6dd9527ed4
Vulnerabilities
CVE-2023-25717
Affected sectors
technology
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.