Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

sz-144-federal

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

1
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found
CVE-2023-25717
Assigner-MITRE Corporation
ShareView Details
Assigner-MITRE Corporation
CVSS Score-9.8||CRITICAL
EPSS-94.24% / 99.92%
||
7 Day CHG~0.00%
Published-13 Feb, 2023 | 00:00
Updated-03 Nov, 2025 | 18:14
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2023-06-02||Apply updates per vendor instructions or disconnect product if it is end-of-life.

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Action-Not Available
Vendor-ruckuswirelesscommscopen/aRuckus Wireless
Product-m510t310nt310ssz100r850h510sz-144t301sm510-jpsz-144-federalr500r300t811-cmt310ct710smartzone_apq410t350dt811-cm\(non-spf\)r760t301nr310zd1000t750ser550r320zd3000r510t310druckus_smartzone_firmwarer700t350set610r350r710ruckus_wireless_adminq910p300h320t504h550t710ssz300r600t750t300r650q710zd5000zd1200r730r750r560h350r720t350ch500e510sz300-federalzd1100r610n/aMultiple Products
CWE ID-CWE-94
Improper Control of Generation of Code ('Code Injection')