XSS in Commscope Ruckus Smartzone
CVE-2023-49225
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.004 (33.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 33rd percentile — 33.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Commscope Ruckus Smartzone
- Commscope, Inc. Ap Solo C110 — versions 114.0.0.0.6565 and earlier
- Commscope, Inc. Ap Solo E510 — versions 114.0.0.0.6565 and earlier
- Commscope, Inc. Ap Solo H320 — versions 114.0.0.0.6565 and earlier
- Commscope, Inc. Ap Solo H350 — versions 116.0.0.0.3128 and earlier
- Commscope, Inc. Ap Solo H510 — versions 114.0.0.0.6565 and earlier
- Commscope, Inc. Ap Solo H550 — versions 116.0.0.0.1506 and earlier
- Commscope, Inc. Ap Solo M510 — versions 114.0.0.0.6565 and earlier
- Commscope, Inc. Ap Solo R310 — versions 110.0.0.0.2014 and earlier
- Commscope, Inc. Ap Solo R320 — versions 114.0.0.0.6565 and earlier
Weakness classification (CWE)
References
- support.ruckuswireless.com/security_bulletins/323 (Patch, Vendor Advisory)
- jvn.jp/en/jp/JVN45891816/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-49225?
- CVE-2023-49225 is a medium-severity vulnerability in Commscope Ruckus Smartzone, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2023-12-07.
- How severe is CVE-2023-49225?
- Medium severity. CVSS v3 base score is 6.1 out of 10.