SARA / Free Tools / CVE / CVE-2023-49225

CVE-2023-49225 — A cross-site-scripting vulnerability exists in Ruckus Access Point products (Zon

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/m

CVSS
— —
EPSS
0.32% (top 45.10%)
CWE
—
Published
2023-12-07T06:22:32.328Z
Last modified
2025-05-28T13:58:41.326Z
CVSS vector
—

01What is this vulnerability?

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product…

02Affected products

VendorProductVersions
CommScope, Inc.ZoneDirector10.5.1 and earlier
CommScope, Inc.SmartZone6.1.1 and earlier
CommScope, Inc.AP Solo R750114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R650114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R730114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T750114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R550114.0.0.0.5585 and earlier
CommScope, Inc.AP Solo R850114.0.0.0.5585 and earlier
CommScope, Inc.AP Solo T750SE114.0.0.0.5585 and earlier
CommScope, Inc.AP Solo R510114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T310D114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo E510114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo C110114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R320114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo H510114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo H320114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T310S114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T310N114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T310C114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T305114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo M510114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R720114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R710114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T710114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T710s114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T610114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo T610s114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R610114.0.0.0.6565 and earlier
CommScope, Inc.AP Solo R310110.0.0.0.2014 and earlier
CommScope, Inc.AP Solo R760118.1.0.0.1274 and earlier
CommScope, Inc.AP Solo R560118.1.0.0.1908 and earlier
CommScope, Inc.AP Solo H550116.0.0.0.1506 and earlier
CommScope, Inc.AP Solo H350116.0.0.0.3128 and earlier
CommScope, Inc.AP Solo T350c116.0.0.0.1543 and earlier
CommScope, Inc.AP Solo T350d116.0.0.0.1543 and earlier
CommScope, Inc.AP Solo T350se116.0.0.0.3136 and earlier
CommScope, Inc.AP Solo R350116.0.0.0.1655 and earlier

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →