PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
AndoryuBot is a DDoS botnet that recruited vulnerable Ruckus wireless access points by exploiting CVE-2023-25717, an unauthenticated remote-code-execution flaw in Ruckus Wireless Admin versions earlier than 10.4. If you manage a Ruckus AP, apply the security update specified by Ruckus bulletin 20230208, check every device’s running software, and keep its management interface off untrusted networks. The available advisory information does not identify one universal AP firmware build that fixes every model.
What CVE-2023-25717 means for a Ruckus access point
CVE-2023-25717 affects the web administration interface in Ruckus Wireless Admin versions before 10.4. An attacker does not need to authenticate to exploit the flaw and can achieve remote code execution on a vulnerable device. The practical risk is greatest when the management interface can be reached from the internet or another untrusted network.
Positive Technologies recorded a CVSS v2 score of 10 for the vulnerability in 2023. That is a severity rating for the flaw, not an estimate of how many APs are infected or currently exposed.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Ruckus published security bulletin 20230208 on February 8, 2023, and edited it on May 18, 2023. The bulletin concerns the AP web vulnerability and is the vendor reference to use when identifying the applicable security update.
#1 Best Overall
How AndoryuBot uses the vulnerability
Hive Pro’s 2023 advisory says AndoryuBot first appeared in February 2023 and that a version targeting Ruckus devices was observed in April. SecurityWeek reported on May 9, 2023, that Fortinet saw exploitation in late April and connected the increase to AndoryuBot.
- Initial compromise: The botnet sends a malicious request to the vulnerable administration interface, exploiting CVE-2023-25717 to run code without valid credentials.
- Follow-on download: After access, the malware downloads a script used in the propagation process. It also obtains the victim device’s public IP address using a hardcoded request.
- Command and control: The compromised device communicates with the botnet’s command-and-control infrastructure using SOCKS.
- DDoS tasking: The operator can issue attack commands. Hive Pro reported that AndoryuBot supports 12 DDoS attack modes in its 2023 advisory.
This describes the campaign documented in 2023; it does not establish the botnet’s size, current infection count, or present-day exploitation rate.
Rank #2
- Two-stream MU-MIMO 2x2:2 for simultaneous downlink transmissions to multiple Wave 2 client devices.
- Concurrent dual-band (5GHz/2.4GHz) support, 867 Mbps (5 GHz) and 300 Mbps (2.4 GHz) of user data rate.
- Up to 4dB of signal-to-interference and noise (SINR) improvement and up to 10dB of interference mitigation.
- Novel channel selection approach delivering up to 50 percent capacity gain over alternative background scanning.
- Supports up to 512 clients, 802.11ac Wave 2, POE (Power Over Ethernet) (No POE or power adapter included) For deployment of multiple access points, a controller (sold separately) is highly recommended. Controller-specific features (such as Smart Mesh networking) are unavailable when the AP is running a standalone AP base image.
Which Ruckus software version fixes the issue?
The documented affected range is Ruckus Wireless Admin versions earlier than 10.4. That version threshold refers to the Wireless Admin software identified in the vulnerability reporting; it should not be treated as a single, universal firmware number for every Ruckus AP model. Use Ruckus bulletin 20230208 to determine the security update applicable to the product and software running in your environment.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The available advisory details do not state per-model fixed firmware builds. Do not infer that an AP is fixed merely because its displayed version seems newer than a number associated with a different Ruckus product. Confirm the device model, installed software, and applicable update against the vendor bulletin, then verify the version actually running on each AP after updating.
Rank #3
- High Performance Wi-Fi 6 4x4:4 Indoor Access Point with 3 Gbps max rate and Embedded IoT.
- Stunning Wi-Fi Performance: Mitigate interference and extend coverage with patented BeamFlex+ adaptive antenna technology utilizing several directional antenna patterns.
- Serve More Devices: Connect more devices simultaneously with six MU-MIMO spatial streams and concurrent dual-band 2.4/5GHz radios while enhancing device performance.
- Converged Access Point: Allow customers to eliminate siloed networks and unify WiFi and non-WiFi wireless technologies into one single network by using built-in Bluetooth Low Energy and Zigbee, and also expanding to any future wireless technologies.
- Multiple Management Options: Manage the R650 from the cloud, with on-premises physical/virtual appliances, or without a controller.
How to reduce risk and recover safely
- Identify every AP and its software. Inventory Ruckus devices, note each model and current running version, and compare them with the affected range and remediation guidance in bulletin 20230208.
- Install the applicable security update. Follow Ruckus’s instructions for the relevant product, then confirm the installed version on each access point rather than relying on an update job’s success message alone.
- Restrict the management plane. Disable remote administration if it is unnecessary. If management access is needed, limit it to trusted networks and authorized administrators rather than exposing the interface to the public internet.
- Strengthen administrator access. Use unique, strong administrator passwords and review who has access to the management interface.
- Check for signs of compromise. Review available logs for unexpected outbound connections or configuration changes, and consult the indicators and guidance provided by the threat researchers and Ruckus. A successful patch does not prove that the device was never compromised; investigate suspicious activity and follow vendor guidance for remediation.
- Replace unsupported devices. If an end-of-life AP cannot receive the required security fix, replace it with supported hardware that receives security updates.
When an AP is end of life
A device that cannot receive security fixes remains exposed to known vulnerabilities even if its management interface is restricted. Network isolation can reduce exposure, but it is not a substitute for a vendor-supported fix. Plan replacement with supported Ruckus hardware where possible, checking the replacement’s support status and management controls before deployment. Current model-level support lifetimes and pricing are not established here, so verify them with Ruckus or an authorized supplier for the specific model.
Quick Recap
Rank #4
![Ruckus ZoneFlex 901-R710-US00 [R710] 802.11ac Wireless Access Point w/ Mounting Clip (Renewed)](https://m.media-amazon.com/images/I/31DCOBQlOuL._SL160_.jpg)
- 802.11ac Multi-User MIMO (MU-MIMO) 4x4:4 support
- 800 Mbps (2.4GHz) and 1733 Mbps (5GHz) - User Throughput
- Concurrent support for HD IPTV, VoIP and data with support for isochronous, multicast IP video streaming
- Ultra-reliable mobile device connectivity with BeamFlex dual polarized adaptive antennas
- Intended for PoE (Power over Ethernet), Power Adapter Not Included. For deployment of multiple access points, a controller (sold separately) is highly recommended. Controller-specific features (such as Smart Mesh networking) are unavailable when the AP is running a standalone AP base image.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
