CriticalCVECISA — Known Exploited Vulnerabilities· 12 May 2023

CVE-2023-25717 — Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Severity: Critical · Kind: Vulnerability

Plain-English summary on the way

We've ingested this item but haven't summarised it yet. Read the upstream advisory using the link below in the meantime — the AI summary will appear here once the next run completes.

From the source

Ruckus Wireless Multiple Products. Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.

Vulnerability facts

CVE: CVE-2023-25717
On CISA KEV since: 2023-05-12
Ransomware use: Unknown

Read the original advisory →← All threat intel

Was this useful?

00000Sign in to react

Plain-English summaries are AI-generated and reviewed for tone, not technical accuracy. For incident response, always rely on the original source linked above.