Description

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Ruckus Networks	RUCKUS H350	unknown
Ruckus Networks	RUCKUS H550	unknown
Ruckus Networks	RUCKUS R350	unknown
Ruckus Networks	RUCKUS R550	unknown
Ruckus Networks	RUCKUS R650	unknown
Ruckus Networks	RUCKUS R750	unknown
Ruckus Networks	RUCKUS R850	unknown
Ruckus Networks	RUCKUS T350c	unknown
Ruckus Networks	RUCKUS T350d	unknown
Ruckus Networks	RUCKUS T350se	unknown
Ruckus Networks	RUCKUS T750	unknown
Ruckus Networks	RUCKUS T750SE	unknown
Ruckus Networks	RUCKUS Unleashed	unknown
Ruckus Networks	Ruckus C110	unknown
Ruckus Networks	Ruckus E510	unknown
Ruckus Networks	Ruckus H320	unknown
Ruckus Networks	Ruckus H510	unknown
Ruckus Networks	Ruckus M510-JP	unknown
Ruckus Networks	Ruckus R320	unknown
Ruckus Networks	Ruckus R510	unknown
Ruckus Networks	Ruckus R610	unknown
Ruckus Networks	Ruckus R710	unknown
Ruckus Networks	Ruckus R720	unknown
Ruckus Networks	Ruckus T310c	unknown
Ruckus Networks	Ruckus T310d	unknown
Ruckus Networks	Ruckus T310n	unknown
Ruckus Networks	Ruckus T310s	unknown
Ruckus Networks	Ruckus T610	unknown
Ruckus Networks	Ruckus T710	unknown
Ruckus Networks	Ruckus T710s	unknown

References

Timeline

Published: Mar 26, 2026
Last modified: Jun 17, 2026
NVD status: Awaiting Analysis

CVE-2023-7338