CVE-2023-49225
Medium
Description
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
SeverityMedium
CVSS6.1
Exploit probability—
ProductRuckuswireless Smartzone Firmware
PublishedDec 7, 2023
First seenDec 7, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruckuswireless smartzone_firmware | v ≤ 6.1.1 | — |
| ruckuswireless r750_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r650_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r730_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t750_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r510_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless e510_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless c110_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r320_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless h510_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless h320_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t305_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless m510_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r720_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r710_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t710_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t610_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r610_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t310d_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t310s_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t310n_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t310c_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t710s_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless t610s_firmware | v ≤ 114.0.0.0.6565 | — |
| ruckuswireless r550_firmware | v ≤ 114.0.0.0.5585 | — |
| ruckuswireless r850_firmware | v ≤ 114.0.0.0.5585 | — |
| ruckuswireless t750se_firmware | v ≤ 114.0.0.0.5585 | — |
| ruckuswireless r310_firmware | v ≤ 110.0.0.0.2014 | — |
| ruckuswireless r760_firmware | v ≤ 118.1.0.0.1274 | — |
| ruckuswireless r560_firmware | v ≤ 118.1.0.0.1908 | — |
| ruckuswireless h550_firmware | v ≤ 116.0.0.0.1506 | — |
| ruckuswireless h350_firmware | v ≤ 116.0.0.0.3128 | — |
| ruckuswireless t350c_firmware | v ≤ 116.0.0.0.1543 | — |
| ruckuswireless t350d_firmware | v ≤ 116.0.0.0.1543 | — |
| ruckuswireless t350se_firmware | v ≤ 116.0.0.0.3136 | — |
| ruckuswireless r350_firmware | v ≤ 116.0.0.0.1655 | — |
| ruckuswireless zonedirector_firmware | v ≤ 10.5.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.