U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2023-25717

Change History

Initial Analysis by NIST 2/23/2023 11:26:54 AM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.1.3
     OR
          cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.1.3.1695
     OR
          cpe:2.3:h:ruckuswireless:sz-144-federal:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz300-federal:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone:6.1.0.0.935:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* versions up to (excluding) 3.6.2.0.795
     OR
          cpe:2.3:h:ruckuswireless:h500:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r300:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r700:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.2.0.2064
     OR
          cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r500:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r600:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t300:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t301n:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t301s:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t504:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* versions up to (excluding) 6.1.0.0.9240
     OR
          cpe:2.3:h:ruckuswireless:e510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h320:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h350:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:h550:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:m510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r310:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r320:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r350:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r510:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r550:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r610:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r650:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r710:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r720:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r730:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r750:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r760:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:r850:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz-144:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz100:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:sz300:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310c:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310d:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310n:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t310s:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t350c:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t350d:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t350se:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t610:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t710:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t710s:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t750:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t750se:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t811-cm:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
          *cpe:2.3:o:ruckuswireless:smartzone_ap:*:*:*:*:*:*:*:* versions up to (excluding) 6.1.1.0.1274
     OR
          cpe:2.3:h:ruckuswireless:r560:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:* versions up to (including) 10.4
     OR
          cpe:2.3:h:ruckuswireless:m510-jp:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:p300:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:q410:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:q710:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:q910:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:t811-cm\(non-spf\):-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:zd1000:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:zd1100:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:zd1200:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:zd3000:-:*:*:*:*:*:*:*
          cpe:2.3:h:ruckuswireless:zd5000:-:*:*:*:*:*:*:*
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-94
Changed Reference Type
https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/ No Types Assigned
https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/ Exploit, Third Party Advisory
Changed Reference Type
https://support.ruckuswireless.com/security_bulletins/315 No Types Assigned
https://support.ruckuswireless.com/security_bulletins/315 Patch, Product, Vendor Advisory