vulnerability

Ruckus Networks Wireless Admin: CVE-2023-25717: Improper Control of Generation of Code

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Feb 13, 2023

Added

Aug 18, 2025

Modified

Aug 18, 2025

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Solution

ruckus-networks-wireless-admin-upgrade-latest

References

CVE-2023-25717
https://attackerkb.com/topics/CVE-2023-25717
https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
https://support.ruckuswireless.com/security_bulletins/315
CWE-94

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report