{"id":"CVE-2023-25717","vendor_project":"Ruckus Wireless","product":"Multiple Products","vulnerability_name":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","date_added":"2023-05-12","due_date":"2023-06-02","known_ransomware_use":"Unknown","short_description":"Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.","required_action":"Apply updates per vendor instructions or disconnect product if it is end-of-life.","cwes":"CWE-94","cvss_version":"3.1","cvss_severity":"CRITICAL","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","nvd_published":"2023-02-13","nvd_status":"Analyzed","epss":0.98069,"epss_percentile":0.9991,"cvss_score":9.8,"days_published_to_kev":88,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2023-25717","by":"CyberMax"}