What’s Vulnerable › Vulnerabilities

CVE-2023-49225

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-07 · updated 2026-06-17
• Weakness: CWE-79

Description

A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in the product. As for the affected products/models/versions, see the information provided by the vendor listed under [References] section or the list under [Product Status] section.

Affected products

• Ruckuswireless C110 Firmware: through 114.0.0.0.6565
• Ruckuswireless E510 Firmware: through 114.0.0.0.6565
• Ruckuswireless H320 Firmware: through 114.0.0.0.6565
• Ruckuswireless H350 Firmware: through 116.0.0.0.3128
• Ruckuswireless H510 Firmware: through 114.0.0.0.6565
• Ruckuswireless H550 Firmware: through 116.0.0.0.1506
• Ruckuswireless M510 Firmware: through 114.0.0.0.6565
• Ruckuswireless R310 Firmware: through 110.0.0.0.2014
• Ruckuswireless R320 Firmware: through 114.0.0.0.6565
• Ruckuswireless R350 Firmware: through 116.0.0.0.1655
• Ruckuswireless R510 Firmware: through 114.0.0.0.6565
• Ruckuswireless R550 Firmware: through 114.0.0.0.5585
• Ruckuswireless R560 Firmware: through 118.1.0.0.1908
• Ruckuswireless R610 Firmware: through 114.0.0.0.6565
• Ruckuswireless R650 Firmware: through 114.0.0.0.6565
• Ruckuswireless R710 Firmware: through 114.0.0.0.6565
• Ruckuswireless R720 Firmware: through 114.0.0.0.6565
• Ruckuswireless R730 Firmware: through 114.0.0.0.6565
• Ruckuswireless R750 Firmware: through 114.0.0.0.6565
• Ruckuswireless R760 Firmware: through 118.1.0.0.1274
• Ruckuswireless R850 Firmware: through 114.0.0.0.5585
• Ruckuswireless Smartzone Firmware: through 6.1.1
• Ruckuswireless T305 Firmware: through 114.0.0.0.6565
• Ruckuswireless T310C Firmware: through 114.0.0.0.6565
• Ruckuswireless T310D Firmware: through 114.0.0.0.6565
• Ruckuswireless T310N Firmware: through 114.0.0.0.6565
• Ruckuswireless T310S Firmware: through 114.0.0.0.6565
• Ruckuswireless T350C Firmware: through 116.0.0.0.1543
• Ruckuswireless T350D Firmware: through 116.0.0.0.1543
• Ruckuswireless T350Se Firmware: through 116.0.0.0.3136

References

• https://jvn.jp/en/jp/JVN45891816/
• https://support.ruckuswireless.com/security_bulletins/323
• https://jvn.jp/en/jp/JVN45891816/
• https://support.ruckuswireless.com/security_bulletins/323

Get alerted when CVE-2023-49225 or the next vulnerability affects your stack