medium6.1
CVE-2023-49225
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo).
Impact
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruckuswireless | R750 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | R650 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | R730 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | T750 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | R510 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | E510 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | C110 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | R320 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | H510 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | H320 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | T305 Firmware | through 114.0.0.0.6565 |
| Ruckuswireless | M510 Firmware | through 114.0.0.0.6565 |