Log in Start free

Vulnerability · Published Dec 7, 2023 · Assigned by jpcert

CVE-2023-49225

Medium 6.1

In plain English

A medium-severity cross-site scripting in AP Solo C110 from CommScope, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.4%top 64.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

Affected products (as reported)

VendorProductVersions
CommScope, Inc. ZoneDirector 10.5.1 and earlier
CommScope, Inc. SmartZone 6.1.1 and earlier
CommScope, Inc. AP Solo R750 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R650 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R730 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T750 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R550 114.0.0.0.5585 and earlier
CommScope, Inc. AP Solo R850 114.0.0.0.5585 and earlier
CommScope, Inc. AP Solo T750SE 114.0.0.0.5585 and earlier
CommScope, Inc. AP Solo R510 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T310D 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo E510 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo C110 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R320 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo H510 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo H320 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T310S 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T310N 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T310C 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T305 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo M510 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R720 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R710 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T710 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T710s 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T610 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo T610s 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R610 114.0.0.0.6565 and earlier
CommScope, Inc. AP Solo R310 110.0.0.0.2014 and earlier
CommScope, Inc. AP Solo R760 118.1.0.0.1274 and earlier

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References