CVE-2023-45992

CVE-2023-45992 A vulnerability in Ruckus CloudPath 5.12 build 5538 or before could allows a remote unauthenticated attacker to obtain full administrator privileges by leveraging Stored Cross-Site Scripting and Cross-Site Request Forgery Vulnerability using a crafted script. On 16 Oct 2023, the...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

Cross site request forgery (csrf)

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

PT-2023-29783 · Ruckus · Ruckus Cloudpath

Name of the Vulnerable Software and Affected Versions: RUCKUS Cloudpath version 5.12 build 5538 or before Description: A vulnerability in the web-based interface of the RUCKUS Cloudpath product could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a use...

CVE-2023-45992

RUCKUS Cloudpath web interface (version 5.12 build 5538 or earlier) is affected by a remote, unauthenticated XSS and CSRF vulnerability. The issue allows an attacker to execute persistent XSS/CSRF via crafted input in the onboarding portal’s macaddress parameter and, with a specific admin action,...

CVE-2023-45992: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

Ruckus Wireless Ruckus CloudPath Cross-Site Scripting Vulnerability

Ruckus Wireless Ruckus CloudPath is a network access control NAC solution for managing the identity and access rights of network users, especially in Wi-Fi networks. Its goal is to provide advanced network access management and security features to ensure that users can securely connect to the...