CVE-2023-25717—Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

漏洞名称

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

描述

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions or disconnect product if it is end-of-life.

其他说明

• https://support.ruckuswireless.com/security_bulletins/315
• https://nvd.nist.gov/vuln/detail/CVE-2023-25717

相关 CWE

• CWE-94