CVE-2023-25717

This flaw is like leaving a front door open with a spare key built into the lock—an attacker can send a specially crafted web request and make the device run attacker-controlled code. Because real attackers have used it to compromise Ruckus routers, it can lead to hidden access (backdoors) and damage to your network.

This matters if your business uses “ruckus wireless admin” or “smartzone ap” / “ruckus smartzone firmware” for managing Ruckus wireless infrastructure running versions up to 10.4. The key issue is that the attack does not require a login or user interaction. It becomes a real risk when the vulnerable web service is reachable over the network (for example, from the internet or other untrusted networks).

This is RED because the vulnerability is in CISA’s KEV list and has been exploited in real-world campaigns targeting Ruckus routers. Attackers don’t need credentials or user actions to trigger it, which makes exposed systems especially likely to be hit. Treat patching and restricting network exposure as an immediate priority.