CVE-2023-7338
Estado: Pendiente de análisisAlta (7.7)—
Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Puntuación base: 7.7
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.52%
- Percentil entre todas las CVEs puntuadas: 42
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1210Exploitation of Remote Serviceslateral movement85 % - Impacto principal
T1059Command and Scripting Interpreterexecution90 %
AV:N/PR:L permite acceso remoto autenticado a servicio sin privilegios elevados; CWE-78 (command injection) confirma ejecución de código arbitrario.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-78
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-7338",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-7338",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-03-27T21:55:24.642662Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "disclosure@vulncheck.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.6
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "disclosure@vulncheck.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 7.7,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "disclosure@vulncheck.com",
"affectedData": [
{
"vendor": "Ruckus Networks",
"product": "RUCKUS H350",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS H550",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS R350",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS R550",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS R650",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS R750",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS R850",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS T350c",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS T350d",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS T350se",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS T750",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS T750SE",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "RUCKUS Unleashed",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus C110",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus E510",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus H320",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus H510",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus M510-JP",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus R320",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus R510",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus R610",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus R710",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus R720",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T310c",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T310d",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T310n",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T310s",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T610",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T710",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Ruckus Networks",
"product": "Ruckus T710s",
"versions": [
{
"status": "affected",
"version": "unknown",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-03-26T20:16:08.853",
"references": [
{
"url": "https://support.ruckuswireless.com/security_bulletins/320",
"source": "disclosure@vulncheck.com"
},
{
"url": "https://www.vulncheck.com/advisories/ruckus-unleashed-authenticated-rce-in-gateway-mode",
"source": "disclosure@vulncheck.com"
}
],
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"type": "Secondary",
"source": "disclosure@vulncheck.com",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems."
},
{
"lang": "es",
"value": "Ruckus Unleashed contiene una vulnerabilidad de ejecución remota de código en la interfaz de gestión basada en web que permite a atacantes remotos autenticados ejecutar código arbitrario en el sistema cuando el modo de pasarela está habilitado. Los atacantes pueden explotar esta vulnerabilidad enviando solicitudes especialmente diseñadas a través de la interfaz de gestión para lograr la ejecución de código arbitrario en los sistemas afectados."
}
],
"lastModified": "2026-06-17T06:52:33.497",
"sourceIdentifier": "disclosure@vulncheck.com"
}