https://pwn.watch/i/ruckus-wireless-multiple-products-cve-2023-25717 Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Added to CISA KEV on 2023-05-12. en Fri, 12 May 2023 00:00:00 GMT https://pwn.watch/i/ruckus-wireless-multiple-products-cve-2023-25717 https://pwn.watch/i/ruckus-wireless-multiple-products-cve-2023-25717#2023-05-12-78638776 Fri, 12 May 2023 00:00:00 GMT critical <p>Ruckus Wireless Multiple Products: CSRF and RCE (CVE-2023-25717): CISA added CVE-2023-25717 to the KEV catalog (due 2023-06-02).</p>