Multiple Ruckus Wireless Products CSRF and RCE Vulnerability (CVE-2023-25717)

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

Published Feb 13, 2023 · Updated May 29, 2026

X LinkedIn

Why patchRisk explained in plain English

Worst-case scenarioIf unpatched

A remote attacker, without authentication, can achieve full data confidentiality loss, arbitrary modification of data, complete denial of service or system unavailability. Federal agencies are required to remediate by 2023-06-02 under CISA BOD 22-01.

How the attack worksNo clicks needed

This is a Code Injection (CWE-94) vulnerability in Ruckus Wireless Multiple Products. Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring. Exploitation requires remote network access, low attack complexity, no authentication required, and no user interaction required.

📧

Phishing link

→

🖼

Malicious file

🔓

Server compromised

Am I affected?Quick check

Probably yes if any of these apply:

●IT Security

●Running ruckus wireless admin: v ≤ 10.4; smartzone ap: v < 6.1.0.0.9240, v < 5.2.2.0.2064, v < 3.6.2.0.795, v < 6.1.1.0.1274; ruckus smartzone firmware: v < 5.2.1.3, 6.1.0.0.935, v < 5.2.1.3.1695

Real-world incidentsWhat we've seen

Active exploitation documented in the wild. Threat-research write-up: https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/

How to patch

Manual remediation steps