VulnerabilityModified
CVE-2023-49225
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo).
MEDIUM 6.1EPSS 0.41%
Does this matter?
Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.
Description
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- ruckuswireless/r750 firmware · ruckuswireless/r650 firmware · ruckuswireless/r730 firmware · ruckuswireless/t750 firmware · ruckuswireless/r510 firmware · ruckuswireless/e510 firmware · ruckuswireless/c110 firmware · ruckuswireless/r320 firmware · ruckuswireless/h510 firmware · ruckuswireless/h320 firmware · ruckuswireless/t305 firmware · ruckuswireless/m510 firmware · ruckuswireless/r720 firmware · ruckuswireless/r710 firmware · ruckuswireless/t710 firmware · ruckuswireless/t610 firmware · ruckuswireless/r610 firmware · ruckuswireless/t310d firmware · ruckuswireless/t310s firmware · ruckuswireless/t310n firmware · +17 more
- Source
- vultures@jpcert.or.jp
References
- https://jvn.jp/en/jp/JVN45891816/Third Party Advisory
- https://support.ruckuswireless.com/security_bulletins/323Patch, Vendor Advisory
- https://jvn.jp/en/jp/JVN45891816/Third Party Advisory
- https://support.ruckuswireless.com/security_bulletins/323Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.