CVE-2023-7338CWE-78

Ruckus Unleashed Authenticated RCE in Gateway Mode

High · published March 26, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00516 · 43.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-03-26T19:20Z
EPSS history
Timeline
  • 26 MAR 19:20Z
    Ruckus Unleashed Authenticated RCE in Gateway Mode
    cvelistv5