Ruckus Unleashed Authenticated RCE in Gateway Mode

7.7 CVSS

Vulnerability Description

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-7338

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Ruckus Networks

View all reports →

Affected Software

RUCKUS H350, RUCKUS H550, RUCKUS R350, RUCKUS R550, RUCKUS R650, RUCKUS R750, RUCKUS R850, RUCKUS T350c, RUCKUS T350d, RUCKUS T350se, RUCKUS T750, RUCKUS T750SE, RUCKUS Unleashed, Ruckus C110, Ruckus E510, Ruckus H320, Ruckus H510, Ruckus M510-JP, Ruckus R320, Ruckus R510, Ruckus R610, Ruckus R710, Ruckus R720, Ruckus T310c, Ruckus T310d, Ruckus T310n, Ruckus T310s, Ruckus T610, Ruckus T710, Ruckus T710s

Vulnerable Versions:

unknown