Which versions of Ruckus H350 are affected by CVE-2023-7338?

Organizations using Ruckus Unleashed face notable risk from CVE-2023-7338, a OS command injection vulnerability rated CVSS 7.7.

How to fix or mitigate CVE-2023-7338?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Validate that input sanitization is in place for all user-controlled parameters.

Ruckus H350 CVE-2023-7338

Q: What is the CVSS score of CVE-2023-7338?

CVE-2023-7338 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2023-60539 HIGH

OS Command Injection (CWE-78)

2026-03-26 VulnCheck

GHSA-pm6g-73h3-xpjp

RCE Command Injection Ruckus H350 Ruckus H550 Ruckus R350 Ruckus R550 Ruckus R650 Ruckus R750 Ruckus R850 Ruckus T350C Ruckus T350D Ruckus T350Se Ruckus T750 Ruckus T750Se Ruckus Unleashed Ruckus C110 Ruckus E510 Ruckus H320 Ruckus H510 Ruckus M510 Jp Ruckus R320 Ruckus R510 Ruckus R610 Ruckus R710 Ruckus R720 Ruckus T310C Ruckus T310D Ruckus T310N Ruckus T310S Ruckus T610 Ruckus T710 Ruckus T710S

7.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 26, 2026 - 20:00 euvd

EUVD-2023-60539

Analysis Generated

Mar 26, 2026 - 20:00 vuln.today

CVE Published

Mar 26, 2026 - 19:20 nvd

HIGH 7.7

DescriptionCVE.org

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems.

AnalysisAI

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the system when gateway mode is enabled. Attackers can exploit this vulnerability by sending specially crafted requests through the management interface to achieve arbitrary code execution on affected systems. Affected products include: Ruckus Networks Ruckus H350, Ruckus Networks Ruckus H550, Ruckus Networks Ruckus R350, Ruckus Networks Ruckus R550, Ruckus Networks Ruckus R650.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.