CVE-2023-45992

CVE-2023-45992 Ruckus CloudPath 5.12 build 5538 及之前版本存在一个漏洞，远程未授权攻击者可通过利用存储型跨站脚本和跨站请求伪造漏洞，使用精心构造的脚本获取完全管理员权限。2023年10月16日，供应商发布了版本5.12 build 5550，修复了该漏洞。 POC 该漏洞的技术细节将在未来公布。 参考 https://support.ruckuswireless.com/securitybulletins/322 https://vulners.com/cve/CVE-2023-45992...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

Cross site request forgery (csrf)

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

CVE-2023-45992

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

PT-2023-29783 · Ruckus · Ruckus Cloudpath

Name of the Vulnerable Software and Affected Versions: RUCKUS Cloudpath version 5.12 build 5538 or before Description: A vulnerability in the web-based interface of the RUCKUS Cloudpath product could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a use...

CVE-2023-45992

RUCKUS Cloudpath web interface (version 5.12 build 5538 or earlier) is affected by a remote, unauthenticated XSS and CSRF vulnerability. The issue allows an attacker to execute persistent XSS/CSRF via crafted input in the onboarding portal’s macaddress parameter and, with a specific admin action,...

CVE-2023-45992: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certa...

Ruckus Wireless Ruckus CloudPath Cross-Site Scripting Vulnerability

Ruckus Wireless Ruckus CloudPath is a network access control NAC solution for managing the identity and access rights of network users, especially in Wi-Fi networks. Its goal is to provide advanced network access management and security features to ensure that users can securely connect to the...