← Back to browse · API

CVE-2023-25717

Severity
CRITICAL
CVSS
9.8
EPSS
0.98069
Risk score
59.32
CISA KEV
Yes
PoC
No
Published
2023-02-13
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2023-29627, GHSA-53WX-2F9C-XXXR
Products
Ruckus Wireless:Multiple Products, n/a:n/a n/a
Sources
cisa.gov CVE-2023-25717
euvd EUVD-2023-29627

Description

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

References