jvndb - jvndb-2023-000119

jvndb-2023-000119

Vulnerability from jvndb

Published

2023-12-01 14:58

Modified

2024-04-23 17:51

Severity ?

6.1 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

Ruckus Access Point contains a cross-site scripting vulnerability.

Details

Ruckus Access Point provided by CommScope, Inc. contains a cross-site scripting vulnerability (CWE-79). MUNEHIRO SHIRATANI of AGEST,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

▼	Type	URL
	JVN	https://jvn.jp/en/jp/JVN45891816/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-49225
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-49225
	Cross-site Scripting(CWE-79)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

▼	Vendor	Product
	CommScope	AP Solo
	CommScope	SmartZone
	CommScope	ZoneDirector

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000119.html",
  "dc:date": "2024-04-23T17:51+09:00",
  "dcterms:issued": "2023-12-01T14:58+09:00",
  "dcterms:modified": "2024-04-23T17:51+09:00",
  "description": "Ruckus Access Point provided by CommScope, Inc. contains a cross-site scripting vulnerability (CWE-79).\r\n\r\nMUNEHIRO SHIRATANI of AGEST,Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000119.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:commscope:ap_solo",
      "@product": "AP Solo",
      "@vendor": "CommScope",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:commscope:smartzone_firmware",
      "@product": "SmartZone",
      "@vendor": "CommScope",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:commscope:zonedirector_firmware",
      "@product": "ZoneDirector",
      "@vendor": "CommScope",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "6.1",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2023-000119",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN45891816/index.html",
      "@id": "JVN#45891816",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-49225",
      "@id": "CVE-2023-49225",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-49225",
      "@id": "CVE-2023-49225",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Ruckus Access Point contains a cross-site scripting vulnerability."
}

cve-2023-49225

Vulnerability from cvelistv5

Published

2023-12-07 06:22

Modified

2024-08-02 21:53

Severity ?

Summary

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

References

▼	URL	Tags
	https://support.ruckuswireless.com/security_bulletins/323
	https://jvn.jp/en/jp/JVN45891816/

Impacted products

▼	Vendor	Product
	CommScope, Inc.	ZoneDirector
	CommScope, Inc.	SmartZone
	CommScope, Inc.	AP Solo R750
	CommScope, Inc.	AP Solo R650
	CommScope, Inc.	AP Solo R730
	CommScope, Inc.	AP Solo T750
	CommScope, Inc.	AP Solo R550
	CommScope, Inc.	AP Solo R850
	CommScope, Inc.	AP Solo T750SE
	CommScope, Inc.	AP Solo R510
	CommScope, Inc.	AP Solo T310D
	CommScope, Inc.	AP Solo E510
	CommScope, Inc.	AP Solo C110
	CommScope, Inc.	AP Solo R320
	CommScope, Inc.	AP Solo H510
	CommScope, Inc.	AP Solo H320
	CommScope, Inc.	AP Solo T310S
	CommScope, Inc.	AP Solo T310N
	CommScope, Inc.	AP Solo T310C
	CommScope, Inc.	AP Solo T305
	CommScope, Inc.	AP Solo M510
	CommScope, Inc.	AP Solo R720
	CommScope, Inc.	AP Solo R710
	CommScope, Inc.	AP Solo T710
	CommScope, Inc.	AP Solo T710s
	CommScope, Inc.	AP Solo T610
	CommScope, Inc.	AP Solo T610s
	CommScope, Inc.	AP Solo R610
	CommScope, Inc.	AP Solo R310
	CommScope, Inc.	AP Solo R760
	CommScope, Inc.	AP Solo R560
	CommScope, Inc.	AP Solo H550
	CommScope, Inc.	AP Solo H350
	CommScope, Inc.	AP Solo T350c
	CommScope, Inc.	AP Solo T350d
	CommScope, Inc.	AP Solo T350se
	CommScope, Inc.	AP Solo R350

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:53:45.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.ruckuswireless.com/security_bulletins/323"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN45891816/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ZoneDirector",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "10.5.1 and earlier "
            }
          ]
        },
        {
          "product": "SmartZone",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "6.1.1 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R750",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R650",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R730",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T750",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R550",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R850",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T750SE",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.5585 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310D",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo E510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo C110",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R320",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H320",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310S",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310N",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T310C",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T305",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo M510",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R720",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R710",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T710",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T710s",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T610",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T610s",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R610",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "114.0.0.0.6565 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R310",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "110.0.0.0.2014 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R760",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "118.1.0.0.1274 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R560",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "118.1.0.0.1908 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H550",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1506 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo H350",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.3128 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350c",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1543 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350d",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1543 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo T350se",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.3136 and earlier "
            }
          ]
        },
        {
          "product": "AP Solo R350",
          "vendor": "CommScope, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "116.0.0.0.1655 and earlier "
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-site scripting (XSS)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-07T06:22:32.328Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://support.ruckuswireless.com/security_bulletins/323"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN45891816/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-49225",
    "datePublished": "2023-12-07T06:22:32.328Z",
    "dateReserved": "2023-11-24T00:19:52.591Z",
    "dateUpdated": "2024-08-02T21:53:45.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted