CVE-2023-49225

Summary

CVE-2023-49225 is a recently disclosed cross-site scripting (XSS) vulnerability that affects various Ruckus Access Point models, including ZoneDirector, SmartZone, and AP Solo. This issue enables an attacker to inject malicious scripts into the web interface of the affected product. When a user logs into the product, the injected script is executed on their web browser, potentially leading to unauthorized access or data theft. To determine if your specific product or version is affected, consult the vendor's list of impacted models provided in the [References] section or the [Product Status] section.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.