01 Record

CVE-2023-49225

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web

MediumPUBLISHEDCNA: jpcert

CNA base score6.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

View raw JSON

02 Description

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.41% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 35.4% of scored records. A rank, not a probability.

NVD base score

6.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2023-12-07 06:22Z2 YR AGO

Last updated

2025-05-28 13:58Z1 YR AGO

Reserved

2023-11-24

Assigning CNA

jpcert

Record state

PUBLISHED

Severity

Medium (CVSS 6.1)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base

Data version

5.1

Document digest

d8f9781ef0575e2ebc6129bef2257f196f40b1b215c1d1077a5e49590fa48560

05 Affected products

VendorProductVersionsPlatforms

CommScope, Inc.ZoneDirector10.5.1 and earlier—

CommScope, Inc.SmartZone6.1.1 and earlier—

CommScope, Inc.AP Solo R750114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R650114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R730114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T750114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R550114.0.0.0.5585 and earlier—

CommScope, Inc.AP Solo R850114.0.0.0.5585 and earlier—

CommScope, Inc.AP Solo T750SE114.0.0.0.5585 and earlier—

CommScope, Inc.AP Solo R510114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T310D114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo E510114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo C110114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R320114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo H510114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo H320114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T310S114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T310N114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T310C114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T305114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo M510114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R720114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R710114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T710114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T710s114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T610114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo T610s114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R610114.0.0.0.6565 and earlier—

CommScope, Inc.AP Solo R310110.0.0.0.2014 and earlier—

CommScope, Inc.AP Solo R760118.1.0.0.1274 and earlier—

CommScope, Inc.AP Solo R560118.1.0.0.1908 and earlier—

CommScope, Inc.AP Solo H550116.0.0.0.1506 and earlier—

CommScope, Inc.AP Solo H350116.0.0.0.3128 and earlier—

CommScope, Inc.AP Solo T350c116.0.0.0.1543 and earlier—

CommScope, Inc.AP Solo T350d116.0.0.0.1543 and earlier—

CommScope, Inc.AP Solo T350se116.0.0.0.3136 and earlier—

CommScope, Inc.AP Solo R350116.0.0.0.1655 and earlier—

06 References

support.ruckuswireless.comhttps://support.ruckuswireless.com/security_bulletins/323
jvn.jphttps://jvn.jp/en/jp/JVN45891816/