Riskcovery

CVE-2023-49225

State
Published
Severity
6.1 Medium
Published
Dec 7, 2023
Updated
May 28, 2025
Reserved
Nov 24, 2023

Read the record on cve.org

Description

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCISA-ADP

Weaknesses

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

ProductVersions
ZoneDirectorCommScope, Inc.
  • 10.5.1 and earlier Affected
SmartZoneCommScope, Inc.
  • 6.1.1 and earlier Affected
AP Solo R750CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R650CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R730CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T750CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R550CommScope, Inc.
  • 114.0.0.0.5585 and earlier Affected
AP Solo R850CommScope, Inc.
  • 114.0.0.0.5585 and earlier Affected
AP Solo T750SECommScope, Inc.
  • 114.0.0.0.5585 and earlier Affected
AP Solo R510CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T310DCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo E510CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo C110CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R320CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo H510CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo H320CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T310SCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T310NCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T310CCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T305CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo M510CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R720CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R710CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T710CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T710sCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T610CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo T610sCommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R610CommScope, Inc.
  • 114.0.0.0.6565 and earlier Affected
AP Solo R310CommScope, Inc.
  • 110.0.0.0.2014 and earlier Affected
AP Solo R760CommScope, Inc.
  • 118.1.0.0.1274 and earlier Affected
AP Solo R560CommScope, Inc.
  • 118.1.0.0.1908 and earlier Affected
AP Solo H550CommScope, Inc.
  • 116.0.0.0.1506 and earlier Affected
AP Solo H350CommScope, Inc.
  • 116.0.0.0.3128 and earlier Affected
AP Solo T350cCommScope, Inc.
  • 116.0.0.0.1543 and earlier Affected
AP Solo T350dCommScope, Inc.
  • 116.0.0.0.1543 and earlier Affected
AP Solo T350seCommScope, Inc.
  • 116.0.0.0.3136 and earlier Affected
AP Solo R350CommScope, Inc.
  • 116.0.0.0.1655 and earlier Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.