What’s Vulnerable › Vulnerabilities

CVE-2023-45992

• Severity: critical (CVSS 9.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-10-19 · updated 2026-07-09
• Weakness: CWE-79

Description

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.

Affected products

• Commscope Ruckus Cloudpath Enrollment System: through 5.12.5538

References

• https://github.com/harry935/CVE-2023-45992
• https://server.cloudpath/
• https://server.cloudpath/admin/enrollmentData/
• https://support.ruckuswireless.com/security_bulletins/322
• https://github.com/harry935/CVE-2023-45992
• https://server.cloudpath/
• https://server.cloudpath/admin/enrollmentData/
• https://support.ruckuswireless.com/security_bulletins/322

Get alerted when CVE-2023-45992 or the next vulnerability affects your stack