Riskcovery

CVE-2023-7338

Ruckus Unleashed Authenticated RCE in Gateway Mode

State
Published
Severity
7.7 High
Published
Mar 26, 2026
Updated
Jul 15, 2026
Reserved
Mar 23, 2026

Read the record on cve.org

Description

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

Scores

CVSSScoreVectorSource
4.07.7 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NVulnCheck
3.17.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HVulnCheck

Weaknesses

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Affected Products

ProductVersions
RUCKUS H350Ruckus Networks
  • unknownAffected
RUCKUS H550Ruckus Networks
  • unknownAffected
RUCKUS R350Ruckus Networks
  • unknownAffected
RUCKUS R550Ruckus Networks
  • unknownAffected
RUCKUS R650Ruckus Networks
  • unknownAffected
RUCKUS R750Ruckus Networks
  • unknownAffected
RUCKUS R850Ruckus Networks
  • unknownAffected
RUCKUS T350cRuckus Networks
  • unknownAffected
RUCKUS T350dRuckus Networks
  • unknownAffected
RUCKUS T350seRuckus Networks
  • unknownAffected
RUCKUS T750Ruckus Networks
  • unknownAffected
RUCKUS T750SERuckus Networks
  • unknownAffected
RUCKUS UnleashedRuckus Networks
  • unknownAffected
Ruckus C110Ruckus Networks
  • unknownAffected
Ruckus E510Ruckus Networks
  • unknownAffected
Ruckus H320Ruckus Networks
  • unknownAffected
Ruckus H510Ruckus Networks
  • unknownAffected
Ruckus M510-JPRuckus Networks
  • unknownAffected
Ruckus R320Ruckus Networks
  • unknownAffected
Ruckus R510Ruckus Networks
  • unknownAffected
Ruckus R610Ruckus Networks
  • unknownAffected
Ruckus R710Ruckus Networks
  • unknownAffected
Ruckus R720Ruckus Networks
  • unknownAffected
Ruckus T310cRuckus Networks
  • unknownAffected
Ruckus T310dRuckus Networks
  • unknownAffected
Ruckus T310nRuckus Networks
  • unknownAffected
Ruckus T310sRuckus Networks
  • unknownAffected
Ruckus T610Ruckus Networks
  • unknownAffected
Ruckus T710Ruckus Networks
  • unknownAffected
Ruckus T710sRuckus Networks
  • unknownAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.