CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE
Unauthenticated attackers can execute arbitrary commands on Ruckus Wireless Admin devices via a crafted HTTP GET request.
- Exploited in the wild
- Since 12 May 2023
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-25717?
CVE-2023-25717 is a critical command injection vulnerability in n/a, published on 13 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Weakness: CWE-94
Which versions are affected by CVE-2023-25717?
It affects 3 products.
Products include Commscope Ruckus Smartzone Firmware, Ruckuswireless Ruckus Wireless Admin, Ruckuswireless Smartzone Ap.
How do I fix CVE-2023-25717?
No fix has been published for CVE-2023-25717 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 2 Jun 2023.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-25717 being exploited?
Yes. Attackers have exploited CVE-2023-25717 in the wild since at least 12 May 2023.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
Sources
Also known as GHSA-53wx-2f9c-xxxr.