6.1

CVE-2023-49225

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ruckuswireless ≫ R750 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R750 Version -
Ruckuswireless ≫ R650 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R650 Version -
Ruckuswireless ≫ R730 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R730 Version -
Ruckuswireless ≫ T750 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T750 Version -
Ruckuswireless ≫ R510 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R510 Version -
Ruckuswireless ≫ E510 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ E510 Version -
Ruckuswireless ≫ C110 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ C110 Version -
Ruckuswireless ≫ R320 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R320 Version -
Ruckuswireless ≫ H510 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ H510 Version -
Ruckuswireless ≫ H320 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ H320 Version -
Ruckuswireless ≫ T305 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T305 Version -
Ruckuswireless ≫ M510 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ M510 Version -
Ruckuswireless ≫ R720 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R720 Version -
Ruckuswireless ≫ R710 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R710 Version -
Ruckuswireless ≫ T710 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T710 Version -
Ruckuswireless ≫ T610 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T610 Version -
Ruckuswireless ≫ R610 Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ R610 Version -
Ruckuswireless ≫ T310d Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T310d Version -
Ruckuswireless ≫ T310s Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T310s Version -
Ruckuswireless ≫ T310n Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T310n Version -
Ruckuswireless ≫ T310c Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T310c Version -
Ruckuswireless ≫ T710s Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T710s Version -
Ruckuswireless ≫ T610s Firmware Version <= 114.0.0.0.6565
   Ruckuswireless ≫ T610s Version -
Ruckuswireless ≫ R550 Firmware Version <= 114.0.0.0.5585
   Ruckuswireless ≫ R550 Version -
Ruckuswireless ≫ R850 Firmware Version <= 114.0.0.0.5585
   Ruckuswireless ≫ R850 Version -
Ruckuswireless ≫ T750se Firmware Version <= 114.0.0.0.5585
   Ruckuswireless ≫ T750se Version -
Ruckuswireless ≫ R310 Firmware Version <= 110.0.0.0.2014
   Ruckuswireless ≫ R310
Ruckuswireless ≫ R760 Firmware Version <= 118.1.0.0.1274
   Ruckuswireless ≫ R760
Ruckuswireless ≫ R760 Firmware Version <= 118.1.0.0.1274
   Ruckuswireless ≫ R760
Ruckuswireless ≫ R560 Firmware Version <= 118.1.0.0.1908
   Ruckuswireless ≫ R560
Ruckuswireless ≫ H550 Firmware Version <= 116.0.0.0.1506
   Ruckuswireless ≫ H550
Ruckuswireless ≫ H350 Firmware Version <= 116.0.0.0.3128
   Ruckuswireless ≫ H350
Ruckuswireless ≫ T350c Firmware Version <= 116.0.0.0.1543
Ruckuswireless ≫ T350d Firmware Version <= 116.0.0.0.1543
Ruckuswireless ≫ T350se Firmware Version <= 116.0.0.0.3136
Ruckuswireless ≫ R350 Firmware Version <= 116.0.0.0.1655
   Ruckuswireless ≫ R350
Ruckuswireless ≫ Smartzone Firmware Version <= 6.1.1
   Commscope ≫ Ruckus Smartzone Version -
Ruckuswireless ≫ Zonedirector Firmware Version <= 10.5.1
   Ruckuswireless ≫ Zonedirector Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.329
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADP 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://jvn.jp/en/jp/JVN45891816/
Third Party Advisory
https://support.ruckuswireless.com/security_bulletins/323
Patch
Vendor Advisory