Unrated
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. CISA required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.
Announced Source revision 1
Original source ↗CVE-2023-25717
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2023-25717
Multiple Products
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2023-25717
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #1324 · Revision 1
- Added to Heist Feed
- Publisher date