CVE:CVE-2023-25717
CNNVD:CNNVD-202302-961
Ruckus Wireless SmartZone是Ruckus公司的高性能WLAN控制器。
Ruckus Wireless Admin 10.4及之前版本存在安全漏洞，该漏洞源于允许通过未经身份验证的HTTP GET请求执行远程代码。
solution:Upgrade ruckuswireless ruckus_wireless_admin to a higher version than 10.4,and avoid the version (,10.4]; Upgrade ruckuswireless smartzone_ap to a higher version than 6.1.0.0.9240,5.2.2.0.2064,3.6.2.0.795,6.1.1.0.1274,and avoid the version (,6.1.0.0.9240),(,5.2.2.0.2064),(,3.6.2.0.795),(,6.1.1.0.1274); Upgrade ruckuswireless smartzone to a higher version than 5.2.1.3,6.1.0.0.935,5.2.1.3.1695,and avoid the version (,5.2.1.3),6.1.0.0.935,(,5.2.1.3.1695)