H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2023-05-12
Last seen2023-05-12

Confidence

—

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

Labels

exploitedkev

CISA KEV context

Vendor / productRuckus Wireless Multiple Products
Added2023-05-12
Due date2023-06-02
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2023-25717
open
cwe
CWE-94
open