May 12, 2023

Started

• Closed✓Patched

  Ruckus Wireless Multiple Products: CSRF and RCE (CVE-2023-25717)

  Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Added to CISA KEV on 2023-05-12.

  Ruckus Wireless Multiple Products·Closed May 12, 2023·updated May 12, 2023