CVE-2023-49225

Published: Dec 7, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

Affected (37)

Products: Ruckuswireless: R750 Firmware, R650 Firmware, R730 Firmware, T750 Firmware, R510 Firmware, E510 Firmware, C110 Firmware, R320 Firmware, H510 Firmware, H320 Firmware, T305 Firmware, M510 Firmware, R720 Firmware, R710 Firmware, T710 Firmware, T610 Firmware, R610 Firmware, T310d Firmware, T310s Firmware, T310n Firmware, T310c Firmware, T710s Firmware, T610s Firmware, R550 Firmware, R850 Firmware, T750se Firmware, R310 Firmware, R760 Firmware, R560 Firmware, H550 Firmware, H350 Firmware, T350c Firmware, T350d Firmware, T350se Firmware, R350 Firmware, Smartzone Firmware, Zonedirector Firmware

37 products

Zonedirector Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R750 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R750	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R650 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R650	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R730 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R730	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T750 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T750	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R510 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R510	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless E510 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless E510	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless C110 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless C110	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R320 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R320	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless H510 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless H510	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless H320 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless H320	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T305 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T305	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless M510 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless M510	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R720 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R720	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R710 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R710	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T710 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T710	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T610 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T610	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R610 Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless R610	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T310d Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T310d	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T310s Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T310s	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T310n Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T310n	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T310c Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T310c	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T710s Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T710s	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T610s Firmware	Up to 114.0.0.0.6565

Running on/with	Platform Versions
Ruckuswireless T610s	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R550 Firmware	Up to 114.0.0.0.5585

Running on/with	Platform Versions
Ruckuswireless R550	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R850 Firmware	Up to 114.0.0.0.5585

Running on/with	Platform Versions
Ruckuswireless R850	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T750se Firmware	Up to 114.0.0.0.5585

Running on/with	Platform Versions
Ruckuswireless T750se	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R310 Firmware	Up to 110.0.0.0.2014

Running on/with	Platform Versions
Ruckuswireless R310	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R760 Firmware	Up to 118.1.0.0.1274

Running on/with	Platform Versions
Ruckuswireless R760	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R560 Firmware	Up to 118.1.0.0.1908

Running on/with	Platform Versions
Ruckuswireless R560	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless H550 Firmware	Up to 116.0.0.0.1506

Running on/with	Platform Versions
Ruckuswireless H550	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless H350 Firmware	Up to 116.0.0.0.3128

Running on/with	Platform Versions
Ruckuswireless H350	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T350c Firmware	Up to 116.0.0.0.1543

Running on/with	Platform Versions
Ruckuswireless T350c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T350d Firmware	Up to 116.0.0.0.1543

Running on/with	Platform Versions
Ruckuswireless T350d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless T350se Firmware	Up to 116.0.0.0.3136

Running on/with	Platform Versions
Ruckuswireless T350se	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless R350 Firmware	Up to 116.0.0.0.1655

Running on/with	Platform Versions
Ruckuswireless R350	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Smartzone Firmware	Up to 6.1.1

Running on/with	Platform Versions
Commscope Ruckus Smartzone	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ruckuswireless Zonedirector Firmware	Up to 10.5.1

Running on/with	Platform Versions
Ruckuswireless Zonedirector	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://jvn.jp/en/jp/JVN45891816/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://support.ruckuswireless.com/security_bulletins/323

Source: vultures@jpcert.or.jp

PatchVendor Advisory

https://jvn.jp/en/jp/JVN45891816/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.ruckuswireless.com/security_bulletins/323

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.