PT-2026-28265 · Ruckus Networks · Ruckus Unleashed

Published 2026-03-26 · Updated 2026-03-26 · CVE-2023-7338

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ruckus Unleashed (affected versions not specified)

Description Ruckus Unleashed has a remote code execution issue in its web-based management interface. Authenticated remote attackers can execute arbitrary code on the system when gateway mode is enabled. Exploitation involves sending specially crafted requests through the management interface. The affected systems can be compromised to achieve arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-7338

Affected Products

Ruckus Unleashed

References · 4

• https://support.ruckuswireless.com/security_bulletins/320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7338 · Security Note
• https://twitter.com/CVEnew/status/2037280582720512299 · Twitter Post
• https://vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode · Note