CVE-2023-25717: listed in the CISA KEV catalog CVE-2023-25717 · CVSS 9.8 CRITICAL · EPSS 98% · KEV 2023-05-12 · patch available
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Is CVE-2023-25717 exploited? Listed in the CISA KEV catalog on 2023-05-12. Federal remediation due 2023-06-02. Past that date by 1246 days. EPSS puts exploitation in the next 30 days at 98%. Public exploit code: none found in monitored sources. Public detection rules exist. Which products and versions are affected? ruckuswireless · ruckus wireless admin · <= 10.4 ruckuswireless · smartzone ap · < 6.1.0.0.9240, < 5.2.2.0.2064, < 3.6.2.0.795, < 6.1.1.0.1274 commscope · ruckus smartzone firmware · < 5.2.1.3, 6.1.0.0.935, < 5.2.1.3.1695 Is there a patch? Yes. Update to one of these or later:
smartzone ap 6.1.0.0.9240 · 5.2.2.0.2064 · 3.6.2.0.795 · 6.1.1.0.1274 ruckus smartzone firmware 5.2.1.3 · 5.2.1.3.1695
From NVD's analysis
What PlainSec published about CVE-2023-25717 Primary sources KEV and EPSS are re-checked daily. Record last updated 2026-08-31.
CVE-2023-25717: listed in the CISA KEV catalog CVE-2023-25717 · CVSS 9.8 CRITICAL · EPSS 98% · KEV 2023-05-12 · patch available
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Is CVE-2023-25717 exploited? Listed in the CISA KEV catalog on 2023-05-12. Federal remediation due 2023-06-02. Past that date by 1246 days. EPSS puts exploitation in the next 30 days at 98%. Public exploit code: none found in monitored sources. Public detection rules exist. Which products and versions are affected? ruckuswireless · ruckus wireless admin · <= 10.4 ruckuswireless · smartzone ap · < 6.1.0.0.9240, < 5.2.2.0.2064, < 3.6.2.0.795, < 6.1.1.0.1274 commscope · ruckus smartzone firmware · < 5.2.1.3, 6.1.0.0.935, < 5.2.1.3.1695 Is there a patch? Yes. Update to one of these or later:
smartzone ap 6.1.0.0.9240 · 5.2.2.0.2064 · 3.6.2.0.795 · 6.1.1.0.1274 ruckus smartzone firmware 5.2.1.3 · 5.2.1.3.1695
From NVD's analysis
What PlainSec published about CVE-2023-25717 Primary sources KEV and EPSS are re-checked daily. Record last updated 2026-08-31.