CVE-2023-49225
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CommScope, Inc. | ZoneDirector | 10.5.1 and earlier | affected |
| CommScope, Inc. | SmartZone | 6.1.1 and earlier | affected |
| CommScope, Inc. | AP Solo R750 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R650 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R730 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T750 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R550 | 114.0.0.0.5585 and earlier | affected |
| CommScope, Inc. | AP Solo R850 | 114.0.0.0.5585 and earlier | affected |
| CommScope, Inc. | AP Solo T750SE | 114.0.0.0.5585 and earlier | affected |
| CommScope, Inc. | AP Solo R510 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T310D | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo E510 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo C110 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R320 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo H510 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo H320 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T310S | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T310N | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T310C | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T305 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo M510 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R720 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R710 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T710 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T710s | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T610 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo T610s | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R610 | 114.0.0.0.6565 and earlier | affected |
| CommScope, Inc. | AP Solo R310 | 110.0.0.0.2014 and earlier | affected |
| CommScope, Inc. | AP Solo R760 | 118.1.0.0.1274 and earlier | affected |
| CommScope, Inc. | AP Solo R560 | 118.1.0.0.1908 and earlier | affected |
| CommScope, Inc. | AP Solo H550 | 116.0.0.0.1506 and earlier | affected |
| CommScope, Inc. | AP Solo H350 | 116.0.0.0.3128 and earlier | affected |
| CommScope, Inc. | AP Solo T350c | 116.0.0.0.1543 and earlier | affected |
| CommScope, Inc. | AP Solo T350d | 116.0.0.0.1543 and earlier | affected |
| CommScope, Inc. | AP Solo T350se | 116.0.0.0.3136 and earlier | affected |
| CommScope, Inc. | AP Solo R350 | 116.0.0.0.1655 and earlier | affected |
Weaknesses
- Cross-site scripting (XSS)
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.