جزئیات آسیب‌پذیری
CVE-2023-7338
RUCKUS Networks RUCKUS H350RUCKUS Networks RUCKUS H550RUCKUS Networks RUCKUS R350RUCKUS Networks RUCKUS R550RUCKUS Networks RUCKUS R650RUCKUS Networks RUCKUS R750
Ruckus Unleashed Authenticated RCE in Gateway Mode
CVSS 4.0
7.7بالا
شرح رسمی (انگلیسی)
Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (VulnCheck) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| RUCKUS Networks | RUCKUS H350 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS H550 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS R350 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS R550 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS R650 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS R750 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS R850 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS T350c | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS T350d | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS T350se | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS T750 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS T750SE | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | RUCKUS Unleashed | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus C110 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus E510 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus H320 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus H510 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus M510-JP | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus R320 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus R510 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus R610 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus R710 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus R720 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T310c | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T310d | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T310n | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T310s | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T610 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T710 | همه | CVEProject cvelistV5 (CNA) |
| RUCKUS Networks | Ruckus T710s | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲- https://support.ruckuswireless.com/security_bulletins/320 vendor-advisory
- https://www.vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode third-party-advisory
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۰۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۴/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- VulnCheck
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵۲٪
احتمال بهره‌برداری در ۳۰ روز
۴۴٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)