Multiple Ruckus Wireless Products CSRF and RCE Vulnerability (CVE-2023-25717)
Severity: critical · Patch status: unpatched · Since 2023-05-12 · CVE-2023-25717
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. CISA added CVE-2023-25717 to its Known Exploited Vulnerabilities catalog on May 12, 2023, which means attackers are exploiting it in the wild.
What to do
- Apply updates per vendor instructions or disconnect product if it is end-of-life.
- US federal agencies must remediate by Jun 2, 2023 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
