RCE in Ruckus Networks C110
CVE-2023-7338
Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit th…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.003 (57.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ruckus Networks C110 — versions unknown
- Ruckus Networks E510 — versions unknown
- Ruckus Networks H320 — versions unknown
- Ruckus Networks H350 — versions unknown
- Ruckus Networks H510 — versions unknown
- Ruckus Networks H550 — versions unknown
- Ruckus Networks M510-jp — versions unknown
- Ruckus Networks R320 — versions unknown
- Ruckus Networks R350 — versions unknown
- Ruckus Networks R510 — versions unknown
Weakness classification (CWE)
References
- Ruckus Security Bulletin 20230731 (vendor-advisory)
- www.vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode (third-party-advisory)
Frequently asked questions
- What is CVE-2023-7338?
- CVE-2023-7338 is a high-severity vulnerability in Ruckus Networks C110, classified under OS Command Injection. CVSS score: 7.5/10. Published 2026-03-26.
- How severe is CVE-2023-7338?
- High severity. CVSS v3 base score is 7.5 out of 10.