github - ghsa-34vj-g8wc-6443

ghsa-34vj-g8wc-6443

Vulnerability from github

Published

2023-12-07 09:30

Modified

2023-12-12 18:31

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-49225"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-12-07T07:15:12Z",
    "severity": "MODERATE"
  },
  "details": "A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.",
  "id": "GHSA-34vj-g8wc-6443",
  "modified": "2023-12-12T18:31:33Z",
  "published": "2023-12-07T09:30:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49225"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN45891816"
    },
    {
      "type": "WEB",
      "url": "https://support.ruckuswireless.com/security_bulletins/323"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

cve-2023-49225

Vulnerability from cvelistv5

Published

2023-12-07 06:22

Modified

2024-08-02 21:53

Severity ?

Summary

References

▼	URL	Tags
	https://support.ruckuswireless.com/security_bulletins/323
	https://jvn.jp/en/jp/JVN45891816/

Impacted products

Vendor

Product

Version

▼

CommScope, Inc.

ZoneDirector

Version: 10.5.1 and earlier

CommScope, Inc.	SmartZone	Version: 6.1.1 and earlier
CommScope, Inc.	AP Solo R750	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R650	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R730	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T750	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R550	Version: 114.0.0.0.5585 and earlier
CommScope, Inc.	AP Solo R850	Version: 114.0.0.0.5585 and earlier
CommScope, Inc.	AP Solo T750SE	Version: 114.0.0.0.5585 and earlier
CommScope, Inc.	AP Solo R510	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T310D	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo E510	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo C110	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R320	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo H510	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo H320	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T310S	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T310N	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T310C	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T305	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo M510	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R720	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R710	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T710	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T710s	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T610	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo T610s	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R610	Version: 114.0.0.0.6565 and earlier
CommScope, Inc.	AP Solo R310	Version: 110.0.0.0.2014 and earlier
CommScope, Inc.	AP Solo R760	Version: 118.1.0.0.1274 and earlier
CommScope, Inc.	AP Solo R560	Version: 118.1.0.0.1908 and earlier
CommScope, Inc.	AP Solo H550	Version: 116.0.0.0.1506 and earlier
CommScope, Inc.	AP Solo H350	Version: 116.0.0.0.3128 and earlier
CommScope, Inc.	AP Solo T350c	Version: 116.0.0.0.1543 and earlier
CommScope, Inc.	AP Solo T350d	Version: 116.0.0.0.1543 and earlier
CommScope, Inc.	AP Solo T350se	Version: 116.0.0.0.3136 and earlier
CommScope, Inc.	AP Solo R350	Version: 116.0.0.0.1655 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:53:45.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.ruckuswireless.com/security_bulletins/323"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN45891816/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ZoneDirector",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "10.5.1 and earlier "
            }
          ]
        },
        {
          "product": "SmartZone",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "6.1.1 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R750",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R650",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R730",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T750",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R550",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R850",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T750SE",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310D",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo E510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo C110",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R320",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H320",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310S",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310N",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310C",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T305",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo M510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R720",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R710",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T710",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T710s",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T610",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T610s",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R610",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R310",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "110.0.0.0.2014 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R760",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "118.1.0.0.1274 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R560",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "118.1.0.0.1908 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H550",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1506 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H350",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.3128 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350c",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1543 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350d",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1543 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350se",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.3136 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R350",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1655 and earlier "
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-site scripting (XSS)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-07T06:22:32.328Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://support.ruckuswireless.com/security_bulletins/323"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN45891816/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-49225",
    "datePublished": "2023-12-07T06:22:32.328Z",
    "dateReserved": "2023-11-24T00:19:52.591Z",
    "dateUpdated": "2024-08-02T21:53:45.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted