CVE-2023-49225
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector,...
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
- Record
CVE-2023-49225- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
- Record
CVE-2023-49225- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2023-53228
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
- Record
EUVD-2023-53228- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-34vj-g8wc-6443
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector,...
A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.
- Record
GHSA-34vj-g8wc-6443- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
- commscope, inc. smartzone
- commscope, inc. zonedirector
- commscope, inc. ap solo c110
- commscope, inc. ap solo e510
- commscope, inc. ap solo h320
- commscope, inc. ap solo h350
- commscope, inc. ap solo h510
- commscope, inc. ap solo h550
- commscope, inc. ap solo m510
- commscope, inc. ap solo r310
- commscope, inc. ap solo r320
- commscope, inc. ap solo r350
Show 63 moreShow less
- commscope, inc. ap solo r510
- commscope, inc. ap solo r550
- commscope, inc. ap solo r560
- commscope, inc. ap solo r610
- commscope, inc. ap solo r650
- commscope, inc. ap solo r710
- commscope, inc. ap solo r720
- commscope, inc. ap solo r730
- commscope, inc. ap solo r750
- commscope, inc. ap solo r760
- commscope, inc. ap solo r850
- commscope, inc. ap solo t305
- commscope, inc. ap solo t310c
- commscope, inc. ap solo t310d
- commscope, inc. ap solo t310n
- commscope, inc. ap solo t310s
- commscope, inc. ap solo t350c
- commscope, inc. ap solo t350d
- commscope, inc. ap solo t350se
- commscope, inc. ap solo t610
- commscope, inc. ap solo t610s
- commscope, inc. ap solo t710
- commscope, inc. ap solo t710s
- commscope, inc. ap solo t750
- commscope, inc. ap solo t750se
- ruckus smartzone
- ruckuswireless c110 firmware
- ruckuswireless e510 firmware
- ruckuswireless h320 firmware
- ruckuswireless h350 firmware
- ruckuswireless h510 firmware
- ruckuswireless h550 firmware
- ruckuswireless m510 firmware
- ruckuswireless r310 firmware
- ruckuswireless r320 firmware
- ruckuswireless r350 firmware
- ruckuswireless r510 firmware
- ruckuswireless r550 firmware
- ruckuswireless r560 firmware
- ruckuswireless r610 firmware
- ruckuswireless r650 firmware
- ruckuswireless r710 firmware
- ruckuswireless r720 firmware
- ruckuswireless r730 firmware
- ruckuswireless r750 firmware
- ruckuswireless r760 firmware
- ruckuswireless r850 firmware
- ruckuswireless smartzone firmware
- ruckuswireless t305 firmware
- ruckuswireless t310c firmware
- ruckuswireless t310d firmware
- ruckuswireless t310n firmware
- ruckuswireless t310s firmware
- ruckuswireless t350c firmware
- ruckuswireless t350d firmware
- ruckuswireless t350se firmware
- ruckuswireless t610 firmware
- ruckuswireless t610s firmware
- ruckuswireless t710 firmware
- ruckuswireless t710s firmware
- ruckuswireless t750 firmware
- ruckuswireless t750se firmware
- ruckuswireless zonedirector firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-49225 is a medium vulnerability (CVSS 6.1) in Commscope, Inc. Smartzone, published December 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.