{"cve_id":"CVE-2023-25717","published":"2023-02-13T20:15:10.973000+00:00","last_modified":"2026-06-17T05:41:48.213000+00:00","vuln_status":"Analyzed","description":"Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","base_score":9.8,"base_severity":"CRITICAL","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-94"],"in_kev":true,"kev_date_added":"2023-05-12","kev_ransomware":false,"epss_score":0.98069,"epss_percentile":0.99911,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T10:19:43.779082+00:00","first_seen":"2023-02-13T20:15:10.973000+00:00","kev_first_seen":"2023-05-12T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["commscope","ruckuswireless"],"products":["e510","h320","h350","h500","h510","h550","m510","m510-jp","p300","q410","q710","q910","r300","r310","r320","r350","r500","r510","r550","r560","r600","r610","r650","r700","r710","r720","r730","r750","r760","r850","ruckus_smartzone_firmware","ruckus_wireless_admin","smartzone_ap","sz-144","sz-144-federal","sz100","sz300","sz300-federal","t300","t301n","t301s","t310c","t310d","t310n","t310s","t350c","t350d","t350se","t504","t610","t710","t710s","t750","t750se","t811-cm","t811-cm\\(non-spf\\)","zd1000","zd1100","zd1200","zd3000","zd5000"],"affected":[{"vendor":"commscope","product":"ruckus_smartzone_firmware","ranges":["< 5.2.1.3","< 5.2.1.3.1695","6.1.0.0.935"]},{"vendor":"ruckuswireless","product":"ruckus_wireless_admin","ranges":["≤ 10.4"]},{"vendor":"ruckuswireless","product":"smartzone_ap","ranges":["< 6.1.0.0.9240","< 6.1.1.0.1274","< 5.2.2.0.2064","< 3.6.2.0.795"]}]}