CVE-2023-7338

HIGH EPSS 40.0%

Published Mar 26, 20263mo ago · Modified Jun 17, 20262w ago

7.7 CVSS 4.0

High

Published Mar 26, 2026 3mo ago

Last Modified Jun 17, 2026 2w ago

Description

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

CVSS Details

Base Score

7.7

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

40.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

References 2

support.ruckuswireless.com https://support.ruckuswireless.com/security_bulletins/320
vulncheck.com https://www.vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.