Multiple Ruckus Wireless Products CSRF and RCE Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 12/05/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| ruckus wireless admin | ≤ 10.4 |
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free